[CVE-2017-9832] fix vulnerability issue