PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2016 document archive · 14

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,572 documents · Identifier year 2016 · 14 / 32

  1. CVE-2016-6480kernel: scsi: aacraid: double fetch in ioctl_send_fib()
  2. CVE-2016-6354flex: buffer overflow in generated code (yy_get_next_buffer)
  3. CVE-2016-6352gdk-pixbuf: Out-of-bounds write in OneLine32() function
  4. CVE-2016-6351Qemu: scsi: esp: OOB write access in esp_do_dma
  5. CVE-2016-6349oci-register-machine: information exposure for docker containers
  6. CVE-2016-6348RESTEasy: Use of JacksonJsonpInterceptor in RESTEasy can lead to Cross Site Script Inclusion attack
  7. CVE-2016-6347RESTEasy: Use of the default exception handler in RESTEasy can lead to reflected XSS attack
  8. CVE-2016-6346RESTEasy: Abuse of GZIPInterceptor in RESTEasy can lead to denial of service attack
  9. CVE-2016-6345RESTEasy: Insufficient use of random values in RESTEasy async jobs could lead to loss of data confidentiality
  10. CVE-2016-6341ovirt-engine: DWH_DB_PASSWORD is in cleartext in the log files
  11. CVE-2016-6338ovirt-engine: webadmin log out must logout all sessions
  12. CVE-2016-6328libexif: Integer overflow in parsing MNOTE entry data of the input file
  13. CVE-2016-6327kernel: infiniband: Kernel crash by sending ABORT_TASK command
  14. CVE-2016-6325tomcat: tomcat writable config files allow privilege escalation
  15. CVE-2016-6323glibc: Missing unwind info in __startcontext causes infinite loop in _Unwind_Backtrace
  16. CVE-2016-6322QCI: creates world readable /etc/qci/answers contains sensitive password
  17. CVE-2016-6321tar: Bypassing the extract path name
  18. CVE-2016-6318cracklib: Stack-based buffer overflow when parsing large GECOS field
  19. CVE-2016-6313libgcrypt: PRNG output is predictable
  20. CVE-2016-6312httpd: Billion laughs attack regression
  21. CVE-2016-6310ovirt-engine: ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD disclosed in log file
  22. CVE-2016-6309openssl: Use After Free for large message sizes
  23. CVE-2016-6308openssl: excessive allocation of memory in dtls1_preprocess_fragment()
  24. CVE-2016-6307openssl: excessive allocation of memory in tls_get_message_header()
  25. CVE-2016-6306openssl: certificate message OOB reads
  26. CVE-2016-6305openssl: SSL_peek() hang on empty record
  27. CVE-2016-6304openssl: OCSP Status Request extension unbounded memory growth
  28. CVE-2016-6303openssl: Integer overflow in MDC2_Update()
  29. CVE-2016-6302openssl: Insufficient TLS session ticket HMAC length checks
  30. CVE-2016-6297php: Stack-based buffer overflow vulnerability in php_stream_zip_opener
  31. CVE-2016-6296php: Heap buffer overflow vulnerability in simplestring_addn in simplestring.c
  32. CVE-2016-6295php: Use after free in SNMP with GC and unserialize()
  33. CVE-2016-6294php: Out-of-bounds access in locale_accept_from_http
  34. CVE-2016-6293icu: Out-of-bounds access in uloc_acceptLanguageFromHTTP
  35. CVE-2016-6292php: Null pointer dereference in exif_process_user_comment
  36. CVE-2016-6291php: Out-of-bounds access in exif_process_IFD_in_MAKERNOTE
  37. CVE-2016-6290php: Use after free in unserialize() with Unexpected Session Deserialization
  38. CVE-2016-6289php: Integer overflow leads to buffer overflow in virtual_file_ex
  39. CVE-2016-6288php: Buffer over-read in php_url_parse_ex
  40. CVE-2016-6263libidn: Crash when given invalid UTF-8 data on input
  41. CVE-2016-6262libidn: Out-of-bounds read when reading zero byte as input
  42. CVE-2016-6261libidn: Out of bounds stack read in idna_to_ascii_4i
  43. CVE-2016-6252shadow-utils: Incorrect integer handling results in LPE
  44. CVE-2016-6250libarchive: Buffer overflow when writing large iso9660 containers
  45. CVE-2016-6223libtiff: Out-of-bounds read on memory-mapped files in TIFFReadRawStrip1() and TIFFReadRawTile1()
  46. CVE-2016-6214gd: Buffer over-read issue when parsing crafted TGA file
  47. CVE-2016-6213kernel: Overflowing kernel mount table using shared bind mount
  48. CVE-2016-6210openssh: User enumeration via covert timing channel
  49. CVE-2016-6207php,gd: Integer overflow error within _gdContributionsAlloc()
  50. CVE-2016-6198kernel: vfs: missing detection of hardlinks in vfs_rename() on overlayfs
CVE 2016 document archive — Page 14 | PulseLinux