Archive

1 November 2017

Vulnerabilities first published on this day (UTC), newest first.

← October 2017 2017 / November /1 December 2017 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Medium 6.5

CVE-2017-14992

tar-split memory exhaustion

Lack of content verification in Docker-CE (Also known as Moby) versions 1.12.6-0, 1.10.3, 17.03.0, 17.03.1, 17.03.2, 17.06.0, 17.06.1, 17.06.2, 17.09.0, and earlier allows a remote attacker to cause a Denial of Service via a crafted image layer payload, aka g…

docker.io docker.io golang-github-vbatts-tar-split golang-github-vbatts-tar-split Debian Ubuntu Go

Nov 1, 2017
Medium 4.3

CVE-2017-1000243

Missing permission check in Jenkins Favorite Plugin

Jenkins Favorite Plugin 2.1.4 and older does not perform permission checks when changing favorite status, allowing any user to set any other user's favorites

org.jvnet.hudson.plugins:favorite Maven

Nov 1, 2017
Medium 4.3

CVE-2017-12625

Moderate severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service

Apache Hive 2.1.x before 2.1.2, 2.2.x before 2.2.1, and 2.3.x before 2.3.1 expose an interface through which masking policies can be defined on tables or views, e.g., using Apache Ranger. When a view is created over a given table, the policy enforcement does …

Apache Software Foundation Apache Hive org.apache.hive:hive-exec org.apache.hive:hive Maven

Nov 1, 2017