PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2016 document archive · 13

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,572 documents · Identifier year 2016 · 13 / 32

  1. CVE-2016-7048postgresql: Interactive installer downloads and executes software via plain HTTP
  2. CVE-2016-7045irssi: String length not validated in format_send_to_gui() causing crash
  3. CVE-2016-7044irssi: Unchecked input in unformat_24bit_color() can lead to crash
  4. CVE-2016-7042kernel: Stack corruption while reading /proc/keys when gcc stack protector is enabled
  5. CVE-2016-7039kernel: remotely triggerable unbounded recursion in the vlan gro code leading to a kernel crash
  6. CVE-2016-7035pacemaker: Privilege escalation due to improper guarding of IPC communication
  7. CVE-2016-7032sudo: noexec bypass via system() and popen()
  8. CVE-2016-7030ipa: DoS attack against kerberized services by abusing password policy
  9. CVE-2016-6912php: Double free in gdImageWebpPtr()
  10. CVE-2016-6911php: Missing check for OOB read in dynamicGetbuf()
  11. CVE-2016-6906gd: Out-of-bounds read in read_image_tga function
  12. CVE-2016-6905gd: Out-of-bounds read in function read_image_tga in gd_tga.c
  13. CVE-2016-6893mailman: CSRF protection missing in the user options page
  14. CVE-2016-6888Qemu: net: vmxnet: integer overflow in packet initialisation
  15. CVE-2016-6855eog: Out-of-bounds write when passing invalid UTF-8 to GMarkup
  16. CVE-2016-6836Qemu: net: vmxnet: Information leakage in vmxnet3_complete_packet
  17. CVE-2016-6835Qemu: net: vmxnet: buffer overflow in vmxnet_tx_pkt_parse_headers() in vmxnet3 device emulation
  18. CVE-2016-6834Qemu: net: vmxnet3: an infinite loop during packet fragmentation
  19. CVE-2016-6833Qemu: net: vmxnet3: use-after-free while writing to device
  20. CVE-2016-6828kernel: Use after free in tcp_xmit_retransmit_queue
  21. CVE-2016-6823ImageMagick: Integer overflow within BMP encoder/writer
  22. CVE-2016-6816tomcat: HTTP Request smuggling vulnerability due to permitting invalid character in HTTP requests
  23. CVE-2016-6814Groovy: Remote code execution via deserialization
  24. CVE-2016-6811hadoop: privilege escalation to root
  25. CVE-2016-6797tomcat: unrestricted access to global resources
  26. CVE-2016-6796tomcat: security manager bypass via JSP Servlet config parameters
  27. CVE-2016-6794tomcat: system property disclosure
  28. CVE-2016-6787kernel: Possible privilege escalation due to lack of locking around changing event->ctx
  29. CVE-2016-6786kernel: Possible privilege escalation due to lack of locking around changing event->ctx
  30. CVE-2016-6664mysql: insecure error log file handling in mysqld_safe (CPU Oct 2016)
  31. CVE-2016-6663mysql: race condition while setting stats during MyISAM table repair (CPU Oct 2016)
  32. CVE-2016-6662mysql: general_log can write to configuration files, leading to privilege escalation (CPU Oct 2016)
  33. CVE-2016-6595docker: DoS via repeatedly joining and quitting swarm cluster as a node
  34. CVE-2016-6520ImageMagick: out-of-bounds read in enhance.c
  35. CVE-2016-6516kernel: vfs: ioctl: double fetch leading to heap overflow
  36. CVE-2016-6515openssh: Denial of service via very long passwords
  37. CVE-2016-6513wireshark: WBXML crash (wnpa-sec-2016-49)
  38. CVE-2016-6512wireshark: MMSE, WAP, WBXML, and WSP infinite loop. (wnpa-sec-2016-48)
  39. CVE-2016-6511wireshark: OpenFlow long loop (wnpa-sec-2016-47)
  40. CVE-2016-6510wireshark: RLC dissector crash (wnpa-sec-2016-46)
  41. CVE-2016-6509wireshark: LDSS dissector crash (wnpa-sec-2016-45)
  42. CVE-2016-6508wireshark: RLC long loop (wnpa-sec-2016-44)
  43. CVE-2016-6507wireshark: MMSE infinite loop (wnpa-sec-2016-43)
  44. CVE-2016-6506wireshark: WSP infinite loop (wnpa-sec-2016-42)
  45. CVE-2016-6505wireshark: PacketBB crash (wnpa-sec-2016-41)
  46. CVE-2016-6497groovy: allows attackers to conduct LDAP entry poisoning attacks by leveraging setting returnObjFlag to true for all search methods
  47. CVE-2016-6492kernel: privilege escalation flaw in mediatek driver
  48. CVE-2016-6491ImageMagick: Out-of-bounds read in CopyMagickMemory
  49. CVE-2016-6490Qemu: virtio: infinite loop in virtqueue_pop
  50. CVE-2016-6489nettle: RSA/DSA code is vulnerable to cache-timing related attacks
CVE 2016 document archive — Page 13 | PulseLinux