CVE 2016 document archive · 15
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,572 documents · Identifier year 2016 · 15 / 32
- CVE-2016-6197kernel: overlayfs: missing upper dentry verification before unlink and rename
- CVE-2016-6187kernel: apparmor: Potential privilege escalation via oops in apparmor_setprocattr()
- CVE-2016-6185perl: XSLoader loads relative paths not included in @INC
- CVE-2016-6170bind: Improper restriction of zone size limit
- CVE-2016-6163librsvg2: Out-of-bounds read when processing crafted SVG file
- CVE-2016-6162kernel: Kernel panic triggered at BUG_ON in net/core/skbuff.c
- CVE-2016-6161gd: Global out-of-bounds read when encoding gif from malformed gd2 input
- CVE-2016-6156kernel: Race condition vulnerability in Chrome driver
- CVE-2016-6153sqlite: Tempdir selection vulnerability
- CVE-2016-6136kernel: Race condition vulnerability in execve argv arguments
- CVE-2016-6132gd: Buffer over-read issue when parsing crafted TGA file
- CVE-2016-6131gcc,gdb,binutils,libitm: Stack overflow vulnerability in libiberty demangler
- CVE-2016-6130kernel: Race condition in sclp_ctl_ioctl_sccb function leads to information leak
- CVE-2016-6129libtomcrypt: possible OP-TEE Bleichenbacher attack
- CVE-2016-6128gd: Invalid color index not properly handled
- CVE-2016-5844libarchive: undefined behaviour (integer overflow) in iso parser
- CVE-2016-5842ImageMagick: Information leak in MagickCore/property.c
- CVE-2016-5841ImageMagick: Integer overflow in MagickCore/profile.c
- CVE-2016-5829kernel: Heap buffer overflow in hiddev driver
- CVE-2016-5828Kernel: powerpc: tm: crash via exec system call on PPC
- CVE-2016-5827libical: Heap buffer over-read in icaltime_from_string
- CVE-2016-5826libical: Heap buffer over-read in parser_get_next_char
- CVE-2016-5825libical: Heap buffer over-read in icalparser_parse_string function
- CVE-2016-5824libical: Multiple use-after-free vulnerabilities
- CVE-2016-5823libical: Segmentation fault on crafted file
- CVE-2016-5773php: ZipArchive class Use After Free Vulnerability in PHP's GC algorithm and unserialize
- CVE-2016-5772php: Double Free Corruption in wddx_deserialize
- CVE-2016-5771php: Use After Free Vulnerability in PHP's GC algorithm and unserialize
- CVE-2016-5770php: Int/size_t confusion in SplFileObject::fread
- CVE-2016-5769php: Integer Overflows in mcrypt_generic() and mdecrypt_generic() resulting in heap overflows
- CVE-2016-5768php: Double free in _php_mb_regex_ereg_replace_exec
- CVE-2016-5767gd: Integer Overflow in gdImagePaletteToTrueColor() resulting in heap overflow
- CVE-2016-5766gd: Integer overflow in _gd2GetHeader() resulting in heap overflow
- CVE-2016-5759kexec-tools: mkdumprd script called "dracut" in the current working directory
- CVE-2016-5728kernel: Race condition vulnerability in VOP driver
- CVE-2016-5725jsch: ChannelSftp path traversal vulnerability
- CVE-2016-5699python: http protocol steam injection attack
- CVE-2016-5696kernel: challenge ACK counter information disclosure.
- CVE-2016-5691ImageMagick: Possible out-of-bounds write in ReadDCMImage()
- CVE-2016-5690ImageMagick: Possible integer overflow when computing pixel scaling table in ReadDCMImage
- CVE-2016-5689ImageMagick: Lack of null pointer check in ReadDCMImage()
- CVE-2016-5688ImageMagick: Heap overflow and random invalid memory writes in WPg parser
- CVE-2016-5687ImageMagick: Out-of-bounds memory read in VerticalFilter()
- CVE-2016-5652libtiff: tiff2pdf JPEG Compression Tables Heap Buffer Overflow
- CVE-2016-5636python: Heap overflow in zipimporter module
- CVE-2016-5635mysql: unspecified vulnerability in subcomponent: Server: Security: Audit (CPU October 2016)
- CVE-2016-5634mysql: unspecified vulnerability in subcomponent: Server: RBR (CPU October 2016)
- CVE-2016-5633mysql: unspecified vulnerability in subcomponent: Server: Performance Schema (CPU October 2016)
- CVE-2016-5632mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU October 2016)
- CVE-2016-5631mysql: unspecified vulnerability in subcomponent: Server: Memcached (CPU October 2016)