Week 13, 2017
27 March – 2 April 2017
Newly exploited 0
Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.
No newly exploited vulnerabilities were reported this week.
Critical new vulnerabilities
Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.
-
Critical 9.8
CVE-2017-7269 Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allow…EPSS 100%
-
Critical 9.8
CVE-2014-3931 fastping.c in MRLG (aka Multi-Router Looking Glass) before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corruption.EPSS 29%
-
Critical 9.8
CVE-2016-8749 Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacksEPSS 11%
- Critical 9.8 EPSS 2.4%
- Critical 9.1 EPSS 1.4%
Not critical, but likely targeted
New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.
- Medium 4.8 EPSS 63%
-
Unscored
CVE-2017-7310 A buffer overflow vulnerability in Import Command in SyncBreeze before 10.6, DiskSorter before 10.6, DiskBoss before 8.9, DiskPulse before 10.6, DiskSavvy befo…EPSS 54%
- Unscored EPSS 37%
-
Unscored
CVE-2017-6542 The ssh_agent_channel_data function in PuTTY before 0.68 allows remote attackers to have unspecified impact via a large length value in an agent protocol messa…EPSS 22%
-
Unscored
CVE-2017-7285 A vulnerability in the network stack of MikroTik Version 6.38.5 released 2017-03-09 could allow an unauthenticated remote attacker to exhaust all available CPU…EPSS 19%
-
Unscored
CVE-2017-7308 The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows loca…EPSS 18%
-
Unscored
CVE-2017-5850 httpd in OpenBSD allows remote attackers to cause a denial of service (memory consumption) via a series of requests for a large file using an HTTP Range header.EPSS 17%
-
Unscored
CVE-2017-6182 In Sophos Web Appliance (SWA) before 4.3.1.2, a section of the machine's interface responsible for generating reports was vulnerable to remote command injectio…EPSS 17%
Advisories
- SUSE / openSUSE Security Updates 41
- Debian Security (DSA / DLA) 211 critical
- Ubuntu Security Notices (USN) 11
- CISA ICS & IT advisories 41 critical
- Oracle Linux Security Advisories (ELSA) 2
- BSI CERT-Bund (WID) 1
- DLA-880-1 tiff3 - security update 7 CVEs
- ICSA-17-087-02 3S-Smart Software Solutions GmbH CODESYS Web Server 2 CVEs