# CVEs published 2018-07-27

76 CVEs were published on July 27, 2018: 0 critical, 18 high. Days are UTC.

- [CVE-2016-9578](https://cve.now/CVE-2016-9578.md): A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. (CVSS 7.5, Red Hat spice)
- [CVE-2016-9603](https://cve.now/CVE-2016-9603.md): A heap buffer overflow flaw was found in QEMU's Cirrus CLGD 54xx VGA emulator's VNC display driver support before 2.9; the issue could occur (CVSS 5.5, Qemu:)
- [CVE-2017-15118](https://cve.now/CVE-2017-15118.md): A stack-based buffer overflow vulnerability was found in NBD server implementation in qemu before 2.11 allowing a client to request an expor (CVSS 8.3, Qemu)
- [CVE-2016-9577](https://cve.now/CVE-2016-9577.md): A vulnerability was discovered in SPICE before 0.13.90 in the server's protocol handling. (CVSS 7.5, Red Hat spice)
- [CVE-2017-15097](https://cve.now/CVE-2017-15097.md): Privilege escalation flaws were found in the Red Hat initialization scripts of PostgreSQL. (CVSS 6.5, Red Hat postgresql init script)
- [CVE-2017-15101](https://cve.now/CVE-2017-15101.md): A missing patch for a stack-based buffer overflow in findTable() was found in Red Hat version of liblouis before 2.5.4. (CVSS 7.8, liblouis)
- [CVE-2017-2648](https://cve.now/CVE-2017-2648.md): It was found that jenkins-ssh-slaves-plugin before version 1.15 did not perform host key verification, thereby enabling Man-in-the-Middle at (CVSS 6.8, jenkins-ssh-slaves-plugin · org.jenkins-ci.plugins:ssh-slav…)
- [CVE-2017-2649](https://cve.now/CVE-2017-2649.md): It was found that the Active Directory Plugin for Jenkins up to and including version 2.2 did not verify certificates of the Active Director (no CVSS, Jenkins project Active Directory Jenkins plugin · org.jenki…)
- [CVE-2017-2650](https://cve.now/CVE-2017-2650.md): It was found that the use of Pipeline: Classpath Step Jenkins plugin enables a bypass of the Script Security sandbox for users with SCM comm (no CVSS, Jenkins project Pipeline: Classpath Step Jenkins plugin · c…)
- [CVE-2017-2652](https://cve.now/CVE-2017-2652.md): It was found that there were no permission checks performed in the Distributed Fork plugin before and including 1.5.0 for Jenkins that provi (no CVSS, Jenkins project DistFork Jenkins plugin · org.jenkins-ci.pl…)
- [CVE-2017-2663](https://cve.now/CVE-2017-2663.md): It was found that subscription-manager's DBus interface before 1.19.4 let unprivileged user access the com.redhat.RHSM1.Facts.GetFacts and c (CVSS 8.2, Red Hat subscription-manager)
- [CVE-2017-2616](https://cve.now/CVE-2017-2616.md): A race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes. (CVSS 5.5, util-linux)
- [CVE-2017-2618](https://cve.now/CVE-2017-2618.md): A flaw was found in the Linux kernel's handling of clearing SELinux attributes on /proc/pid/attr files before 4.9.10. (CVSS 5.5, Linux kernel)
- [CVE-2017-2620](https://cve.now/CVE-2017-2620.md): Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. (CVSS 5.5, Qemu:)
- [CVE-2017-2626](https://cve.now/CVE-2017-2626.md): It was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. (CVSS 5.2, Xorg libICE)
- [CVE-2017-2629](https://cve.now/CVE-2017-2629.md): curl before 7.53.0 has an incorrect TLS Certificate Status Request extension feature that asks for a fresh proof of the server's certificate (CVSS 4.3, curl)
- [CVE-2017-2632](https://cve.now/CVE-2017-2632.md): A logic error in valid\_role() in CloudForms role validation before 5.7.1.3 could allow a tenant administrator to create groups with a higher (CVSS 4.9, Red Hat cfme)
- [CVE-2017-2633](https://cve.now/CVE-2017-2633.md): An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. (CVSS 5.4, Qemu:)
- [CVE-2017-2634](https://cve.now/CVE-2017-2634.md): It was found that the Linux kernel's Datagram Congestion Control Protocol (DCCP) implementation before 2.6.22.17 used the IPv4-only inet\_sk\_ (CVSS 7.5, Linux kernel:)
- [CVE-2016-9595](https://cve.now/CVE-2016-9595.md): A flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure temporary files. (CVSS 7.3, Foreman katello-debug)
- [CVE-2017-2579](https://cve.now/CVE-2017-2579.md): An out-of-bounds read vulnerability was found in netpbm before 10.61. (CVSS 3.3, netpbm)
- [CVE-2017-2580](https://cve.now/CVE-2017-2580.md): An out-of-bounds write vulnerability was found in netpbm before 10.61. (CVSS 4.5, netpbm)
- [CVE-2017-2581](https://cve.now/CVE-2017-2581.md): An out-of-bounds write vulnerability was found in netpbm before 10.61. (CVSS 4.5, netpbm)
- [CVE-2017-2586](https://cve.now/CVE-2017-2586.md): A null pointer dereference vulnerability was found in netpbm before 10.61. (CVSS 3.3, netpbm)
- [CVE-2017-2587](https://cve.now/CVE-2017-2587.md): A memory allocation vulnerability was found in netpbm before 10.61. (CVSS 3.3, netpbm)
- [CVE-2017-2590](https://cve.now/CVE-2017-2590.md): A vulnerability was found in ipa before 4.4. (CVSS 8.1, Red Hat ipa)
- [CVE-2017-2614](https://cve.now/CVE-2017-2614.md): When updating a password in the rhvm database the ovirt-aaa-jdbc-tool tools before 1.1.3 fail to correctly check for the current password if (CVSS 6.8, Red Hat ovirt-engine-extension-aaa-jdbc)
- [CVE-2017-2621](https://cve.now/CVE-2017-2621.md): An access-control flaw was found in the OpenStack Orchestration (heat) service before 8.0.0, 6.1.0 and 7.0.2 where a service log directory w (CVSS 5.9, Red Hat openstack-heat)
- [CVE-2017-2623](https://cve.now/CVE-2017-2623.md): It was discovered that rpm-ostree and rpm-ostree-client before 2017.3 fail to properly check GPG signatures on packages when doing layering. (CVSS 5.3, Project Atomic rpm-ostree,)
- [CVE-2017-2624](https://cve.now/CVE-2017-2624.md): It was found that xorg-x11-server before 1.19.0 including uses memcmp() to check the received MIT cookie against a series of valid cookies. (CVSS 5.9, xorg-x11-server)
- [CVE-2017-2625](https://cve.now/CVE-2017-2625.md): It was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys. (CVSS 6.5, Xorg libXdmcp)
- [CVE-2017-2630](https://cve.now/CVE-2017-2630.md): A stack buffer overflow flaw was found in the Quick Emulator (QEMU) before 2.9 built with the Network Block Device (NBD) client support. (CVSS 5.5, Qemu:)
- [CVE-2017-2640](https://cve.now/CVE-2017-2640.md): An out-of-bounds write flaw was found in the way Pidgin before 2.12.0 processed XML content. (CVSS 7.5, pidgin)
- [CVE-2017-2646](https://cve.now/CVE-2017-2646.md): It was found that when Keycloak before 2.5.5 receives a Logout request with a Extensions in the middle of the request, the SAMLSloRequestPar (CVSS 7.5, Red Hat keycloak · org.keycloak:keycloak-core)
- [CVE-2017-2651](https://cve.now/CVE-2017-2651.md): jenkins-mailer-plugin before version 1.20 is vulnerable to an information disclosure while using the feature to send emails to a dynamically (CVSS 3.7, jenkins-mailer-plugin · org.jenkins-ci.plugins:mailer)
- [CVE-2017-2653](https://cve.now/CVE-2017-2653.md): A number of unused delete routes are present in CloudForms before 5.7.2.1 which can be accessed via GET requests instead of just POST reques (CVSS 4.1, Red Hat CloudForms)
- [CVE-2017-2658](https://cve.now/CVE-2017-2658.md): It was discovered that the Dashbuilder login page as used in Red Hat JBoss BPM Suite before 6.4.2 and Red Hat JBoss Data Virtualization & Se (CVSS 2.6, Red Hat BPMS · Red Hat JDV)
- [CVE-2017-2674](https://cve.now/CVE-2017-2674.md): JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a stored XSS via several lists in Business Central. (CVSS 6.1, Red Hat business-central)
- [CVE-2017-7463](https://cve.now/CVE-2017-7463.md): JBoss BRMS 6 and BPM Suite 6 before 6.4.3 are vulnerable to a reflected XSS via artifact upload. (CVSS 6.1, Red Hat business-central)
- [CVE-2018-1056](https://cve.now/CVE-2018-1056.md): An out-of-bounds heap buffer read flaw was found in the way advancecomp before 2.1-2018/02 handled processing of ZIP files. (CVSS 3.3, amadvance advancecomp:)
- [CVE-2018-10882](https://cve.now/CVE-2018-10882.md): A flaw was found in the Linux kernel's ext4 filesystem. (CVSS 4.8, \[UNKNOWN\] kernel)
- [CVE-2017-12148](https://cve.now/CVE-2017-12148.md): A flaw was found in Ansible Tower's interface before 3.1.5 and 3.2.0 with SCM repositories. (CVSS 8.4, Red Hat Ansible Tower)
- [CVE-2017-12173](https://cve.now/CVE-2017-12173.md): It was found that sssd's sysdb\_search\_user\_by\_upn\_res() function before 1.16.0 did not sanitize requests when querying its local cache and w (CVSS 4.3, sssd)
- [CVE-2017-15113](https://cve.now/CVE-2017-15113.md): ovirt-engine before version 4.1.7.6 with log level set to DEBUG includes passwords in the log file without masking. (CVSS 7.2, Red Hat ovirt-engine)
- [CVE-2017-15119](https://cve.now/CVE-2017-15119.md): The Network Block Device (NBD) server in Quick Emulator (QEMU) before 2.11 is vulnerable to a denial of service issue. (CVSS 5.8, qemu)
- [CVE-2017-12165](https://cve.now/CVE-2017-12165.md): It was discovered that Undertow before 1.4.17, 1.3.31 and 2.0.0 processes http request headers with unusual whitespaces which can cause poss (CVSS 2.6, Red Hat undertow · io.undertow:undertow-core)
- [CVE-2017-12195](https://cve.now/CVE-2017-12195.md): A flaw was found in all Openshift Enterprise versions using the openshift elasticsearch plugin. (CVSS 6.5, Red Hat OpenShift)
- [CVE-2017-15120](https://cve.now/CVE-2017-15120.md): An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference whe (CVSS 7.5, PowerDNS pdns-recursor)
- [CVE-2017-15125](https://cve.now/CVE-2017-15125.md): A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the name field is not properly sanitized for HT (CVSS 6.5, Red Hat cloudforms)
- [CVE-2017-2595](https://cve.now/CVE-2017-2595.md): It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via p (CVSS 7.7, \[UNKNOWN\] wildfly)
- [CVE-2017-2670](https://cve.now/CVE-2017-2670.md): It was found in Undertow before 1.3.28 that with non-clean TCP close, the Websocket server gets into infinite loop on every IO thread, effec (CVSS 7.5, \[UNKNOWN\] undertow · io.undertow:undertow-core)
- [CVE-2017-7497](https://cve.now/CVE-2017-7497.md): The dialog for creating cloud volumes (cinder provider) in CloudForms does not filter cloud tenants by user. (CVSS 4.1, \[UNKNOWN\] CFME)
- [CVE-2017-2666](https://cve.now/CVE-2017-2666.md): It was discovered in Undertow that the code that parsed the HTTP request line permitted invalid characters. (CVSS 6.5, \[UNKNOWN\] undertow · io.undertow:undertow-core)
- [CVE-2017-7519](https://cve.now/CVE-2017-7519.md): In Ceph, a format string flaw was found in the way libradosstriper parses input from user. (CVSS 2.3, \[UNKNOWN\] ceph)
- [CVE-2018-10862](https://cve.now/CVE-2018-10862.md): WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war (no CVSS, org.wildfly.core:wildfly-server)
- [CVE-2017-2622](https://cve.now/CVE-2017-2622.md): An accessibility flaw was found in the OpenStack Workflow (mistral) service where a service log directory was improperly made world readable (CVSS 5.9, \[UNKNOWN\] openstack-mistral)
- [CVE-2017-2639](https://cve.now/CVE-2017-2639.md): It was found that CloudForms does not verify that the server hostname matches the domain name in the certificate when using a custom CA and (CVSS 6.5, \[UNKNOWN\] CloudForms)
- [CVE-2017-7470](https://cve.now/CVE-2017-7470.md): It was found that spacewalk-channel can be used by a non-admin user or disabled users to perform administrative tasks due to an incorrect au (CVSS 6.5, \[UNKNOWN\] spacewalk-backend)
- [CVE-2018-6686](https://cve.now/CVE-2018-6686.md): Drive Encryption (MDE) - Authentication Bypass vulnerability (CVSS 7.0, McAfee Drive Encryption)
- [CVE-2017-12151](https://cve.now/CVE-2017-12151.md): A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3 (CVSS 7.4, samba)
- [CVE-2017-7464](https://cve.now/CVE-2017-7464.md): It was found that the JAXP implementation used in JBoss EAP 7.0 for SAX and DOM parsing is vulnerable to certain XXE flaws. (CVSS 8.7, \[UNKNOWN\] JBoss)
- [CVE-2018-14609](https://cve.now/CVE-2018-14609.md): An issue was discovered in the Linux kernel through 4.17.10. (no CVSS)
- [CVE-2018-14610](https://cve.now/CVE-2018-14610.md): An issue was discovered in the Linux kernel through 4.17.10. (no CVSS)
- [CVE-2018-14611](https://cve.now/CVE-2018-14611.md): An issue was discovered in the Linux kernel through 4.17.10. (no CVSS)
- [CVE-2018-14612](https://cve.now/CVE-2018-14612.md): An issue was discovered in the Linux kernel through 4.17.10. (no CVSS)
- [CVE-2018-14613](https://cve.now/CVE-2018-14613.md): An issue was discovered in the Linux kernel through 4.17.10. (no CVSS)
- [CVE-2018-14614](https://cve.now/CVE-2018-14614.md): An issue was discovered in the Linux kernel through 4.17.10. (no CVSS)
- [CVE-2018-14615](https://cve.now/CVE-2018-14615.md): An issue was discovered in the Linux kernel through 4.17.10. (no CVSS)
- [CVE-2018-14616](https://cve.now/CVE-2018-14616.md): An issue was discovered in the Linux kernel through 4.17.10. (no CVSS)
- [CVE-2018-14617](https://cve.now/CVE-2018-14617.md): An issue was discovered in the Linux kernel through 4.17.10. (no CVSS)
- [CVE-2018-14601](https://cve.now/CVE-2018-14601.md): An issue was discovered in GitLab Community and Enterprise Edition 11.1.x before 11.1.2. (no CVSS)
- [CVE-2018-14602](https://cve.now/CVE-2018-14602.md): An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. (no CVSS)
- [CVE-2018-14603](https://cve.now/CVE-2018-14603.md): An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. (no CVSS)
- [CVE-2018-14604](https://cve.now/CVE-2018-14604.md): An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. (no CVSS)
- [CVE-2018-14605](https://cve.now/CVE-2018-14605.md): An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. (no CVSS)
- [CVE-2018-14606](https://cve.now/CVE-2018-14606.md): An issue was discovered in GitLab Community and Enterprise Edition before 10.8.7, 11.0.x before 11.0.5, and 11.1.x before 11.1.2. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-07-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.