VDB

GCVE-110-MAGEIA-2017-28

GCVE-110-MAGEIA-2017-28
Advisory Published
Vulnetix · Advisory published January 27, 2017
The "attribute uniqueness" plugin did not properly NULL-terminate an array when building up its configuration if a so called 'old-style' configuration was being used. An attacker, authenticated, but possibly also unauthenticated, could possibly force the plugin to read beyond allocated memory and trigger a segfault. The crash could also possibly be triggered accidentally (CVE-2017-2591).

Affected Products

VendorProductVersionsPlatforms
Mageia389-ds-base1.3.4.14-1.1.mga5 (unaffected), 0 (affected), 0 (affected), 1.3.4.14-1.1.mga5 (unaffected)
Mageiamicrocode0.20170707-1.mga6.nonfree (unaffected), 0 (affected)
Mageiamicrocode0 (affected), 0.20170707-1.mga5.nonfree (unaffected)

Browse GCVE Records

73,393 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›