CVE-2017-6972
Critical · 9.8CVSS
9.8
EPSS
14.6%
Published
Mar 22, 2017
CISA due date
—
The record
AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka AlienVault ID ENG-104945, a different vulnerability than CVE-2017-6970 and CVE-2017-6971.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-80047 A vulnerability in Hugging Face Transformers (versions 4.57.0 to 5.16.1) allows remote… CWE-273
- CVE-2026-61897 An Ubuntu-specific patch to AccountsService before 23.13.9-8ubuntu7 only partially drops… CWE-273
- CVE-2026-58086 As an inadvertent side effect of an unrelated code change, PRIV_KTRACE was always denied… CWE-273
- CVE-2026-49421 The kernel function that implements unlinkat(2) and funlinkat(2) validated the… CWE-273
- CVE-2026-0099 In onNullBinding of HostEmulationManager.java, there is a possible way to launch an… CWE-273
- CVE-2026-44073 Authentication modules in Netatalk 1.5.0 through 4.4.2 fail to check the return value of… CWE-273
- CVE-2026-32107 xrdp is an open source RDP server. CWE-273
- CVE-2026-21882 theshit is a command-line utility that automatically detects and fixes common mistakes in… CWE-273