CVE 2016 document archive · 16
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,572 documents · Identifier year 2016 · 16 / 32
- CVE-2016-5630mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)
- CVE-2016-5629mysql: unspecified vulnerability in subcomponent: Server: Federated (CPU October 2016)
- CVE-2016-5628mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016)
- CVE-2016-5627mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)
- CVE-2016-5626mysql: unspecified vulnerability in subcomponent: Server: GIS (CPU October 2016)
- CVE-2016-5625mysql: unspecified vulnerability in subcomponent: Server: Packaging (CPU October 2016)
- CVE-2016-5624mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016)
- CVE-2016-5617mysql: insecure error log file handling in mysqld_safe (CPU Oct 2016)
- CVE-2016-5616mysql: race condition while setting stats during MyISAM table repair (CPU Oct 2016)
- CVE-2016-5612mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016)
- CVE-2016-5609mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016)
- CVE-2016-5597OpenJDK: exposure of server authentication credentials to proxy (Networking, 8160838)
- CVE-2016-5584mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU October 2016)
- CVE-2016-5582OpenJDK: incomplete type checks of System.arraycopy arguments (Hotspot, 8160591)
- CVE-2016-5573OpenJDK: insufficient checks of JDWP packets (Hotspot, 8159519)
- CVE-2016-5568OpenJDK: incorrect menu handling on Windows (AWT, 8158993)
- CVE-2016-5554OpenJDK: insufficient classloader consistency checks in ClassLoaderWithRepository (JMX, 8157739)
- CVE-2016-5552OpenJDK: incorrect URL parsing in URLStreamHandler (Networking, 8167223)
- CVE-2016-5549OpenJDK: ECDSA implementation timing attack (Libraries, 8168724)
- CVE-2016-5548OpenJDK: DSA implementation timing attack (Libraries, 8168728)
- CVE-2016-5547OpenJDK: missing ObjectIdentifier length check (Libraries, 8168705)
- CVE-2016-5546OpenJDK: incorrect ECDSA signature extraction from the DER input (Libraries, 8168714)
- CVE-2016-5542OpenJDK: missing algorithm restrictions for jar verification (Libraries, 8155973)
- CVE-2016-5507mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)
- CVE-2016-5483mysql: Incorrect input validation allowing code execution via mysqldump
- CVE-2016-5444mysql: unspecified vulnerability in subcomponent: Server: Connection (CPU July 2016)
- CVE-2016-5443mysql: unspecified vulnerability in subcomponent: Server: Connection (CPU July 2016)
- CVE-2016-5442mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU July 2016)
- CVE-2016-5441mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU July 2016)
- CVE-2016-5440mysql: unspecified vulnerability in subcomponent: Server: RBR (CPU July 2016)
- CVE-2016-5439mysql: unspecified vulnerability in subcomponent: Server: Privileges (CPU July 2016)
- CVE-2016-5437mysql: unspecified vulnerability in subcomponent: Server: Log (CPU July 2016)
- CVE-2016-5436mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU July 2016)
- CVE-2016-5432ovirt-engine: ovirt-engine-provisiondb logs contain DB username and password in plain text
- CVE-2016-5425tomcat: Local privilege escalation via systemd-tmpfiles service
- CVE-2016-5424postgresql: privilege escalation via crafted database and role names
- CVE-2016-5423postgresql: CASE/WHEN with inlining can cause untrusted pointer dereference
- CVE-2016-5421curl: Use of connection struct after free
- CVE-2016-5420curl: Re-using connection with wrong client cert
- CVE-2016-5419curl: TLS session resumption client cert bypass
- CVE-2016-5418libarchive: Archive Entry with type 1 (hardlink), but has a non-zero data size file overwrite
- CVE-2016-5417glibc: per-thread memory leak in __res_vinit with IPv6 nameservers
- CVE-2016-5416389-ds-base: ACI readable by anonymous user
- CVE-2016-5414freeipa: incorrect check for SubjectAltNames during CA ACL check
- CVE-2016-5412Kernel: powerpc: kvm: Infinite loop via H_CEDE hypercall when running under hypervisor-mode
- CVE-2016-5410firewalld: Firewall configuration can be modified by any logged in user
- CVE-2016-5408squid: Buffer overflow vulnerability in cachemgr.cgi tool
- CVE-2016-5407libXv: Insufficient validation of server responses results in out-of bounds accesses
- CVE-2016-5405389-ds-base: Password verification vulnerable to timing attack
- CVE-2016-5404ipa: Insufficient privileges check in certificate revocation