https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2017-17806.htmlhttps://patchthecve.com/cve/CVE-2017-17806.htmlWed, 17 Jun 2026 01:11:41 +0000HIGH 7.8: The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that the underlying cryptographic hash algorithm is unkeyed, allowing a local attacker able to use the AF_ALG-based hash interface (CONFIG_CRYPTO_USER_API_HASH) and the SHA-3 hash algorithm (CONFIG_CRYPTO_SHAhttps://patchthecve.com/cve/CVE-2017-17805.htmlhttps://patchthecve.com/cve/CVE-2017-17805.htmlWed, 17 Jun 2026 01:11:40 +0000HIGH 7.8: The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowing a local attacker able to use the AF_ALG-based skcipher interface (CONFIG_CRYPTO_USER_API_SKCIPHER) to cause a denial of service (uninitialized-memory free and kernel crash) or hahttps://patchthecve.com/cve/CVE-2016-1254.htmlhttps://patchthecve.com/cve/CVE-2016-1254.htmlWed, 17 Jun 2026 00:41:33 +0000HIGH 7.5: Tor before 0.2.8.12 might allow remote attackers to cause a denial of service (client crash) via a crafted hidden service descriptor.https://patchthecve.com/cve/CVE-2015-3138.htmlhttps://patchthecve.com/cve/CVE-2015-3138.htmlWed, 17 Jun 2026 00:25:22 +0000HIGH 7.5: print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash).https://patchthecve.com/cve/CVE-2014-4616.htmlhttps://patchthecve.com/cve/CVE-2014-4616.htmlWed, 17 Jun 2026 00:10:20 +0000MEDIUM 5.9: Array index error in the scanstring function in the _json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the raw_decode function.https://patchthecve.com/cve/CVE-2015-3405.htmlhttps://patchthecve.com/cve/CVE-2015-3405.htmlWed, 17 Jun 2026 00:25:52 +0000HIGH 7.5: ntp-keygen in ntp 4.2.8px before 4.2.8p2-RC2 and 4.3.x before 4.3.12 does not generate MD5 keys with sufficient entropy on big endian machines when the lowest order byte of the temp variable is between 0x20 and 0x7f and not #, which might allow remote attackers to obtain the value of generated MD5 khttps://patchthecve.com/cve/CVE-2015-5203.htmlhttps://patchthecve.com/cve/CVE-2015-5203.htmlWed, 17 Jun 2026 00:28:39 +0000MEDIUM 5.5: Double free vulnerability in the jasper_image_stop_load function in JasPer 1.900.17 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.https://patchthecve.com/cve/CVE-2015-5221.htmlhttps://patchthecve.com/cve/CVE-2015-5221.htmlWed, 17 Jun 2026 00:28:42 +0000MEDIUM 5.5: Use-after-free vulnerability in the mif_process_cmpt function in libjasper/mif/mif_cod.c in the JasPer JPEG-2000 library before 1.900.2 allows remote attackers to cause a denial of service (crash) via a crafted JPEG 2000 image file.https://patchthecve.com/cve/CVE-2016-9961.htmlhttps://patchthecve.com/cve/CVE-2016-9961.htmlWed, 17 Jun 2026 00:56:50 +0000CRITICAL 9.8: game-music-emu before 0.6.1 mishandles unspecified integer values.https://patchthecve.com/cve/CVE-2016-9960.htmlhttps://patchthecve.com/cve/CVE-2016-9960.htmlWed, 17 Jun 2026 00:56:50 +0000MEDIUM 5.5: game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).https://patchthecve.com/cve/CVE-2016-9959.htmlhttps://patchthecve.com/cve/CVE-2016-9959.htmlWed, 17 Jun 2026 00:56:50 +0000HIGH 7.8: game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values.https://patchthecve.com/cve/CVE-2016-9958.htmlhttps://patchthecve.com/cve/CVE-2016-9958.htmlWed, 17 Jun 2026 00:56:50 +0000HIGH 7.8: game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations.https://patchthecve.com/cve/CVE-2016-9957.htmlhttps://patchthecve.com/cve/CVE-2016-9957.htmlWed, 17 Jun 2026 00:56:50 +0000HIGH 7.8: Stack-based buffer overflow in game-music-emu before 0.6.1.