PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2016 document archive · 12

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,572 documents · Identifier year 2016 · 12 / 32

  1. CVE-2016-7415icu: Stack based buffer overflow in locid.cpp
  2. CVE-2016-7414php: Out of bounds heap read when verifying signature of zip phar in phar_parse_zipfile
  3. CVE-2016-7413php: Use after free in wddx_deserialize
  4. CVE-2016-7412php: Heap overflow in mysqlnd when not receiving UNSIGNED_FLAG in BIT field
  5. CVE-2016-7411php: Memory corruption when destructing deserialized object
  6. CVE-2016-7410libdwarf: Heap buffer overflow in _dwarf_read_loc_section
  7. CVE-2016-7392autotrace: Out of bounds write when converting bmp image
  8. CVE-2016-7180wireshark: IPMI Trace dissector crash
  9. CVE-2016-7179wireshark: Catapult DCT2000 dissector crash
  10. CVE-2016-7178wireshark: UMTS FP dissector crash
  11. CVE-2016-7177wireshark: Catapult DCT2000 dissector crash
  12. CVE-2016-7176wireshark: H.225 dissector crash
  13. CVE-2016-7175wireshark: QNX6 QNET dissector crash
  14. CVE-2016-7170Qemu: vmware_vga: OOB stack memory access when processing svga command
  15. CVE-2016-7167curl: escape and unescape integer overflows
  16. CVE-2016-7166libarchive: Denial of service using a crafted gzip file
  17. CVE-2016-7163openjpeg: Integer overflow in opj_pi_create_decode
  18. CVE-2016-7162file-roller: Path traversal vulnerability when opening crafted archive
  19. CVE-2016-7161Qemu: net: xilinx_ethlite: heap buffer overflow in eth_rx
  20. CVE-2016-7157Qemu: scsi: mptsas: invalid memory access while building configuration pages
  21. CVE-2016-7156Qemu: scsi: pvscsi: infintie loop when building SG list
  22. CVE-2016-7155Qemu: scsi: pvscsi: OOB read and infinite loop while setting descriptor rings
  23. CVE-2016-7153HTTP/2: HEIST attack allows attackers to sniff TLS encrypted HTTP/2 traffic
  24. CVE-2016-7152HTTPS: HEIST attack allows attackers to sniff TLS encrypted HTTP traffic
  25. CVE-2016-7141curl: Incorrect reuse of client certificates
  26. CVE-2016-7134php: Heap overflow in curl_escape
  27. CVE-2016-7133php: memory allocator fails to realloc small block to large one
  28. CVE-2016-7132php: wddx_deserialize null dereference in php_wddx_pop_element
  29. CVE-2016-7131php: wddx_deserialize null dereference with invalid xml
  30. CVE-2016-7130php: wddx_deserialize null dereference
  31. CVE-2016-7129php: wddx_deserialize allows illegal memory access
  32. CVE-2016-7128php: Memory Leakage In exif_process_IFD_in_TIFF
  33. CVE-2016-7127php: imagegammacorrect allows arbitrary write access
  34. CVE-2016-7126php: select_colors write out-of-bounds
  35. CVE-2016-7125php: Session Data Injection Vulnerability
  36. CVE-2016-7124php: bypass __wakeup() in deserialization of an unexpected object
  37. CVE-2016-7123mailman: Missing CSRF protection in admin web interface
  38. CVE-2016-7117kernel: Use-after-free in the recvmmsg exit path
  39. CVE-2016-7116Qemu: 9p: directory traversal flaw in 9p virtio backend
  40. CVE-2016-7101ImageMagick: Out-of-bounds read vulnerability in SGI Coder
  41. CVE-2016-7098wget: files rejected by access list are kept on the disk for the duration of HTTP connection
  42. CVE-2016-7097kernel: Setting a POSIX ACL via setxattr doesn't clear the setgid bit
  43. CVE-2016-7091sudo: Possible info leak via INPUTRC
  44. CVE-2016-7076sudo: noexec bypass via wordexp()
  45. CVE-2016-7056openssl: ECDSA P-256 timing attack key recovery
  46. CVE-2016-7055openssl: Carry propagating bug in Montgomery multiplication
  47. CVE-2016-7054openssl: Corrupting larger payloads when using ChaCha20/Poly1305 ciphersuites leads to DoS
  48. CVE-2016-7053openssl: CMS Null dereference vulnerability
  49. CVE-2016-7052openssl: Missing CRL sanity check
  50. CVE-2016-7050RESTEasy: SerializableProvider enabled by default and deserializes untrusted data
CVE 2016 document archive — Page 12 | PulseLinux