This article is from Aliyun-yun-Habitat community, the original click here.
I. Overview of Vulnerabilities
September 19, 2017, Apache Tomcat official confirmed and fixed two high-risk vulnerabilities, vulnerability CVE number: cve-2017-12615 and cve-
After this year's Pwn2Own competition, VMware recently released updates for its ESXi, wordstation, and fusion products to fix some of the high-risk vulnerabilities uncovered in the hacker contest. In fact, before the tournament began, VMware urgently repaired a virtual machine escape vulnerability numbered cve-2017-4901.
And recently, someone on GitHub unveiled a VMware Virtual machine escape utility,
cve-2017-12617 Severe Remote Code Execution (RCE) vulnerability found in Apache Tomcat
Affects systems with HTTP put enabled (by setting the default servlet read-only initialization parameter to false). If the default servlet parameter is read-only set to False, or the default servlet is configured, The Tomcat version before 9.0.1 (Beta), 8.5.23,8.0.47, and 7.0.82 contains potentially dangerous remote code
cve-2017-12617
The Apache Tomcat team announced October 3 that if the default servlet is configured, at 9.0.1 (Beta), 8.5.23, All Tomcat versions prior to 8.0.47 and 7.0.82 contain potentially dangerous remote execution code (RCE) vulnerabilities on all operating systems, cve-2017-12617: Remote code execution vulnerab
Linux Kernel kernel/bpf/verifier. clocal Denial of Service Vulnerability (CVE-2017-17863)Linux Kernel kernel/bpf/verifier. clocal Denial of Service Vulnerability (CVE-2017-17863)
Release date:Updated on:Affected Systems:
Linux kernel 4.9.x-4.9.71
Description:
Bugtraq id: 102321CVE (CAN) ID:
Linux Kernel 'Mm/hugetlb. c' Local Denial of Service Vulnerability (CVE-2017-15127)Linux Kernel 'Mm/hugetlb. c' Local Denial of Service Vulnerability (CVE-2017-15127)
Release date:Updated on:Affected Systems:
Linux kernel
Description:
Bugtraq id: 102517CVE (CAN) ID: CVE
Recently saw the online exposure of a Windows Remote Code execution vulnerability, the hacker can use a shortcut to execute arbitrary instructions on the user's computer, so the vulnerability was partially analyzed.1. Vulnerability Description:MicrosoftWindows. LNK Remote Code Execution Vulnerability (Vulnerability number: cve-2017-8464), an attacker could present the user with a malicious. LNK file and a r
Linux Kernel Local Denial of Service Vulnerability (CVE-2017-17807)Linux Kernel Local Denial of Service Vulnerability (CVE-2017-17807)
Release date:Updated on:Affected Systems:
Linux kernel
Description:
Bugtraq id: 102301CVE (CAN) ID: CVE-
Linux Kernel Local Denial of Service Vulnerability (CVE-2017-18232)Linux Kernel Local Denial of Service Vulnerability (CVE-2017-18232)
Release date:Updated on:Affected Systems:
Linux kernel
Description:
Bugtraq id: 103423CVE (CAN) ID: CVE-
Schneider Electric IGSS Mobile local information leakage (CVE-2017-9969)Schneider Electric IGSS Mobile local information leakage (CVE-2017-9969)
Release date:Updated on:Affected Systems:
Schneider Electric IGSS Mobile
Description:
Bugtraq id: 103046CVE (CAN) ID: CVE-
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.