Archive

14 October 2017

Vulnerabilities first published on this day (UTC), newest first.

← September 2017 2017 / October /14 November 2017 →

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

Critical 9.8

CVE-2017-12629 Public exploit Scanner template EPSS 92%

Remote code execution occurs in Apache Solr

Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config API add-listener command to reach the RunExecutableListener class. Elasticsearch, although it uses Lucene, is NOT vulner…

org.apache.solr:solr-core lucene-solr lucene-solr Debian Ubuntu Maven

Oct 14, 2017
Unscored —

CVE-2017-15299

The KEYS subsystem in the Linux kernel through 4.13.7 mishandles use of add_key for a key that already exists but is un…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Oct 14, 2017
Unscored —

CVE-2017-15298

Git through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a denial of service (memor…

git git Debian Ubuntu

Oct 14, 2017