CVE-2017-3068: adobe flash_player Out-of-bounds Write

EPSS trend

Probability

20.35%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

No change 0.00 pp

From 20.35% on 22-09-2026

22-09-202622-10-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

1 found

exploit-databasedosmultipleVerified
Adobe Flash - AVC Deblocking Out-of-Bounds Read
Maturity: poc

References

9 links

security.gentoo.org/glsa/201705-12Vendor AdvisoryX Refsource GENTOOThird Party Advisory
helpx.adobe.com/security/products/flash-player/apsb17-15.htmlX Refsource CONFIRMPatchVendor AdvisoryREPORT
www.securityfocus.com/bid/98349VDB EntryX Refsource BIDBroken LinkThird Party Advisory
www.exploit-db.com/exploits/42017/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
access.redhat.com/errata/RHSA-2017:1219Vendor AdvisoryX Refsource REDHATThird Party Advisory
www.securitytracker.com/id/1038427VDB EntryX Refsource SECTRACKBroken LinkThird Party Advisory
ubuntu.com/security/CVE-2017-3068REPORT
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3069REPORT
www.cve.org/CVERecord?id=CVE-2017-3068REPORT

Related vulnerabilities

CriticalCVE-2018-16850Alpine Linuxalpine · postgresql +39 more7y agoalpine postgresqlpostgresql before versions 11.1, 10.6 is vulnerable to a to SQL injection in pg_upgrade and pg_dump via CREATE TRIGGER ... REFERENCING. Using a purpose-crafted trigger definition, an attacker can cause arbitrary SQL statements to run, with superuser privileges.EPSS5.15%CriticalCVE-2018-16395Alpine Linuxalpine · ruby +26 more7y agoalpine rubyAn issue was discovered in the OpenSSL library in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. When two OpenSSL::X509::Name objects are compared using ==, depending on the ordering, non-equal objects may return true. When the first argument is one character longer than the second, or the second argument contains a character that is one less than a character in the same position of the first argument, the result of == will be true. This could be leveraged to create an illegitimate certificate that may be accepted as legitimate and then used in signing or encryption operations.EPSS10.71%HighCVE-2018-16396Alpine Linuxalpine · ruby +24 more7y agoalpine rubyAn issue was discovered in Ruby before 2.3.8, 2.4.x before 2.4.5, 2.5.x before 2.5.2, and 2.6.x before 2.6.0-preview3. It does not taint strings that result from unpacking tainted strings with some formats.EPSS7.97%MediumCVE-2018-16866chainguard · py3-systemd +27 more7y agochainguard py3-systemdAn out of bounds read was discovered in systemd-journald in the way it parses log messages that terminate with a colon ':'. A local attacker can use this flaw to disclose process memory data. Versions from v221 to v239 are vulnerable.EPSS1.05%MediumCVE-2018-1283apache software foundation · apache http server +11 more8y agoapache software foundation apache http serverIn Apache httpd 2.4.0 to 2.4.29, when mod_session is configured to forward its session data to CGI applications (SessionEnv on, not the default), a remote user may influence their content by using a "Session" header. This comes from the "HTTP_SESSION" variable name used by mod_session to forward its data to CGIs, since the prefix "HTTP_" is also used by the Apache HTTP Server to pass HTTP header fields, per CGI specifications.EPSS9.74%HighCVE-2018-1111fedora · dhcp +14 more8y agofedora dhcpDHCP packages in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier are vulnerable to a command injection flaw in the NetworkManager integration script included in the DHCP client. A malicious DHCP server, or an attacker on the local network able to spoof DHCP responses, could use this flaw to execute arbitrary commands with root privileges on systems using NetworkManager and configured to obtain network configuration using the DHCP protocol.EPSS97.86%

All vulnerabilities inflash_player flash_player_desktop_runtime enterprise_linux enterprise_linux_desktop enterprise_linux_workstation

CVE-2017-3068: adobe flash_player Out-of-bounds Write

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References