PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2016 document archive

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,572 documents · Identifier year 2016 · 1 / 32

  1. CVE-2016-1000111Twisted: sets environmental variable based on user supplied Proxy request header
  2. CVE-2016-1000110CGIHandler: sets environmental variable based on user supplied Proxy request header
  3. CVE-2016-1000104mod_fcgid: mod_fcgid sets environmental variable based on user supplied Proxy request header
  4. CVE-2016-1000033shotwell: TLS certificates are not validated when publishing photos to external services
  5. CVE-2016-1000031FileUpload: DiskFileItem file manipulation
  6. CVE-2016-1000030pidgin: X.509 Certificates Improperly Imported
  7. CVE-2016-1000027spring: HttpInvokerServiceExporter readRemoteInvocation method untrusted java deserialization
  8. CVE-2016-20022kernel: USB: improper validation of wMaxPacketValue entries in endpoint descriptors
  9. CVE-2016-20012openssh: Public key information leak
  10. CVE-2016-10907kernel: out of bounds write in ad5755_parse_dt in drivers/iio/dac/ad5755.c
  11. CVE-2016-10906kernel: use-after-free in functions arc_emac_tx and arc_emac_tx_clean in drivers/net/ethernet/arc/emac_main.c
  12. CVE-2016-10905kernel: use-after-free in fs/gfs2/rgrp.c
  13. CVE-2016-10764kernel: off by one in function cqspi_setup_flash() in drivers/mtd/spi-nor/cadence-quadspi.c
  14. CVE-2016-10746libvirt: libvirt-domain.c supports virDomainGetTime API calls with an RO connection instead of RW connection
  15. CVE-2016-10745python-jinja2: Sandbox escape due to information disclosure via str.format
  16. CVE-2016-10741kernel: race condition between direct and memory-mapped I/O in fs/xfs/xfs_aops.c
  17. CVE-2016-10739glibc: getaddrinfo should reject IP addresses with trailing characters
  18. CVE-2016-10735bootstrap: XSS in the data-target attribute
  19. CVE-2016-10730amanda: Privilege escalation in amstar and amgtar via --*tar-path option
  20. CVE-2016-10729amanda: Privilege escalation in runtar via --rsh-command option
  21. CVE-2016-10727evolution-data-server: IMAPx Component Information Disclosure
  22. CVE-2016-10714zsh: Off-by-one error results in undersized buffers
  23. CVE-2016-10713patch: Out-of-bounds access in pch_write_line function in pch.c
  24. CVE-2016-10712php: Output of stream_get_meta_data can be falsified by its input
  25. CVE-2016-10708openssh: Out of sequence NEWKEYS message can allow remote attacker to cause denial of service
  26. CVE-2016-10507openjpeg: Integer overflow in bmp24toimage function in convertbmp.c
  27. CVE-2016-10506openjpeg: Division by zero in functions opj_pi_next_cprl, opj_pi_next_pcrl, and opj_pi_next_rpcl in pi.c
  28. CVE-2016-10505openjpeg: NULL pointer dereference in imagetopnm function in convert.c
  29. CVE-2016-10504openjpeg: Heap-based buffer over-write in in opj_mqc_byteout function of mqc.c
  30. CVE-2016-10397php: Incorrect handling of URI components in URL parser
  31. CVE-2016-10377openvswitch: Unsigned integer overflow in the miniflow_extract function
  32. CVE-2016-10374perltidy: Uses current working directory without symlink-attack protection
  33. CVE-2016-10371libtiff: Assertion failure in TIFFWriteDirectoryTagCheckedRational
  34. CVE-2016-10350libarchive: Heap-based buffer over-read in the archive_read_format_cab_read_header function
  35. CVE-2016-10349libarchive: Heap-based buffer over-read in the archive_le32dec function
  36. CVE-2016-10328freetype: heap-based buffer overflow related to the cff_parser_run function
  37. CVE-2016-10327libreoffice: Heap-buffer-overflow in EnhWMFReader::ReadEnhWMF
  38. CVE-2016-10318kernel: User can assign an encryption policy to a directory owned by a different user
  39. CVE-2016-10317ghostscript: Heap-buffer overflow in the fill_threshold_buffer function
  40. CVE-2016-10272libtiff: Heap-based buffer overflow in tif_next.c
  41. CVE-2016-10271libtiff: Heap-based buffer overflow in tif_fax3.c
  42. CVE-2016-10270libtiff: Heap-based buffer overflow in tiff_read.c
  43. CVE-2016-10269libtiff: Heap-based buffer overflow in tiff_unix.c
  44. CVE-2016-10268libtiff: Integer underflow in tiffcp.c
  45. CVE-2016-10267libtiff: Divide-by-zero in tif_ojpeg.c
  46. CVE-2016-10266libtiff: Divide-by-zero in tif_read.c
  47. CVE-2016-10255elfutils: Memory allocation failure in __libelf_set_rawdata_wrlock (elf_getdata.c)
  48. CVE-2016-10254elfutils: Memory allocation failure in allocate_elf
  49. CVE-2016-10252ImageMagick: Memory leak in isOptionMember function
  50. CVE-2016-10251jasper: integer overflow in jpc_pi_nextcprl(), leading to out-of-bounds read
CVE 2016 document archive | PulseLinux