# CVEs published 2017-12-05 60 CVEs were published on December 5, 2017: 0 critical, 0 high. Days are UTC. - [CVE-2017-14018](https://cve.now/CVE-2017-14018.md): An improper authentication issue was discovered in Johnson & Johnson Ethicon Endo-Surgery Generator Gen11, all versions released before Nove (no CVSS, Ethicon Endo-Surgery Generator G11) - [CVE-2017-15868](https://cve.now/CVE-2017-15868.md): The bnep\_add\_connection function in net/bluetooth/bnep/core.c in the Linux kernel before 3.19 does not ensure that an l2cap socket is availa (no CVSS) - [CVE-2017-14355](https://cve.now/CVE-2017-14355.md): A potential security vulnerability has been identified in HPE Connected Backup versions 8.6 and 8.8.6. (no CVSS) - [CVE-2017-17431](https://cve.now/CVE-2017-17431.md): GeniXCMS 1.1.5 has XSS via the from, id, lang, menuid, mod, q, status, term, to, or token parameter. (no CVSS, genix/cms) - [CVE-2017-4920](https://cve.now/CVE-2017-4920.md): The implementation of the OSPF protocol in VMware NSX-V Edge 6.2.x prior to 6.2.8 and NSX-V Edge 6.3.x prior to 6.3.3 doesn't correctly hand (no CVSS, VMware NSX-V Edge) - [CVE-2017-11005](https://cve.now/CVE-2017-11005.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a Use After Free condition c (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-11006](https://cve.now/CVE-2017-11006.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a Use After Free condition c (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-11007](https://cve.now/CVE-2017-11007.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a possibility of st (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-11043](https://cve.now/CVE-2017-11043.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a WiFI driver function, a (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-14895](https://cve.now/CVE-2017-14895.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, after a subsystem reset, iwp (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-14897](https://cve.now/CVE-2017-14897.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while handling the QSEOS\_RPM (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-14902](https://cve.now/CVE-2017-14902.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, due to a race condition in t (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-14904](https://cve.now/CVE-2017-14904.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a crafted binder request can (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-14908](https://cve.now/CVE-2017-14908.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the SafeSwitch test applicat (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-14909](https://cve.now/CVE-2017-14909.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a count value that is read f (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-14914](https://cve.now/CVE-2017-14914.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, handles in the global client (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-14916](https://cve.now/CVE-2017-14916.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer sizes in the message (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-14917](https://cve.now/CVE-2017-14917.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer sizes in the message (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-14918](https://cve.now/CVE-2017-14918.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the GPS location wireless (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-6211](https://cve.now/CVE-2017-6211.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the processing of a downl (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-9716](https://cve.now/CVE-2017-9716.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the qbt1000 driver implement (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-17051](https://cve.now/CVE-2017-17051.md): An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. (no CVSS, nova) - [CVE-2017-11016](https://cve.now/CVE-2017-11016.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when memory allocation fails (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-11019](https://cve.now/CVE-2017-11019.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the fd allocated during the (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-11030](https://cve.now/CVE-2017-11030.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the HDMI video driver fun (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-11031](https://cve.now/CVE-2017-11031.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the VIDIOC\_G\_SDE\_ROTATOR\_FEN (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-11033](https://cve.now/CVE-2017-11033.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the coresight-tmc driver, (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-11042](https://cve.now/CVE-2017-11042.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, ImsService and the IQtiImsEx (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-11044](https://cve.now/CVE-2017-11044.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a KGSL driver function, a (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-11045](https://cve.now/CVE-2017-11045.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a camera driver function, (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-11047](https://cve.now/CVE-2017-11047.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a graphics driver ioctl h (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-11049](https://cve.now/CVE-2017-11049.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a video driver, a race co (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-14896](https://cve.now/CVE-2017-14896.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a memory allocation (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-14898](https://cve.now/CVE-2017-14898.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing the QCA\_NL8 (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-14899](https://cve.now/CVE-2017-14899.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing the QCA\_NL8 (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-14900](https://cve.now/CVE-2017-14900.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing the QCA\_NL8 (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-14901](https://cve.now/CVE-2017-14901.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing the QCA\_NL8 (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-14903](https://cve.now/CVE-2017-14903.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing the SENDACT (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-14905](https://cve.now/CVE-2017-14905.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing a specially (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-14907](https://cve.now/CVE-2017-14907.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, cryptographic strength is re (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-15813](https://cve.now/CVE-2017-15813.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a buffer overflow can occur (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-17426](https://cve.now/CVE-2017-17426.md): The malloc function in the GNU C Library (aka glibc or libc6) 2.26 could return a memory block that is too small if an attempt is made to al (no CVSS) - [CVE-2017-9698](https://cve.now/CVE-2017-9698.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, improperly specified offset/ (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-9700](https://cve.now/CVE-2017-9700.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer overwrite is possible (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-9703](https://cve.now/CVE-2017-9703.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition in a Camera (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-9708](https://cve.now/CVE-2017-9708.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the camera driver, the fu (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-9709](https://cve.now/CVE-2017-9709.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a privilege escalation vulne (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-9710](https://cve.now/CVE-2017-9710.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, IOCTL interface to send QMI (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-9718](https://cve.now/CVE-2017-9718.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition in a multim (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2017-9722](https://cve.now/CVE-2017-9722.md): In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when updating custom EDID (h (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android) - [CVE-2016-1252](https://cve.now/CVE-2016-1252.md): The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4~beta2, in Ubuntu 14.04 LTS before 1.0.1ubuntu2.17, in Ubunt (no CVSS) - [CVE-2016-1253](https://cve.now/CVE-2016-1253.md): The most package in Debian wheezy before 5.0.0a-2.2, in Debian jessie before 5.0.0a-2.3+deb8u1, and in Debian unstable before 5.0.0a-3 allow (no CVSS) - [CVE-2016-1254](https://cve.now/CVE-2016-1254.md): Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via a crafted hidden service descriptor. (no CVSS) - [CVE-2016-1255](https://cve.now/CVE-2016-1255.md): The pg\_ctlcluster script in postgresql-common package in Debian wheezy before 134wheezy5, in Debian jessie before 165+deb8u2, in Debian unst (no CVSS) - [CVE-2017-16856](https://cve.now/CVE-2017-16856.md): The RSS Feed macro in Atlassian Confluence before version 6.5.2 allows remote attackers to inject arbitrary HTML or JavaScript via cross sit (no CVSS, Atlassian Confluence) - [CVE-2017-16857](https://cve.now/CVE-2017-16857.md): It is possible to bypass the bitbucket auto-unapprove plugin via minimal brute-force because it is relying on asynchronous events on the bac (no CVSS, Atlassian Auto-Unapprove Plugin) - [CVE-2017-16929](https://cve.now/CVE-2017-16929.md): The remote management interface on the Claymore Dual GPU miner 10.1 is vulnerable to an authenticated directory traversal vulnerability expl (no CVSS) - [CVE-2017-16930](https://cve.now/CVE-2017-16930.md): The remote management interface on the Claymore Dual GPU miner 10.1 allows an unauthenticated remote attacker to execute arbitrary code due (no CVSS) - [CVE-2017-17066](https://cve.now/CVE-2017-17066.md): The (1) i2pd before 2.17 and (2) kovri pre-alpha implementations of the I2P routing protocol do not properly handle Garlic DeliveryTypeTunne (no CVSS) - [CVE-2017-8824](https://cve.now/CVE-2017-8824.md): The dccp\_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileges or cause a denial (no CVSS, Linux kernel through) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2017-12-05 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.