PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2016 document archive · 17

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,572 documents · Identifier year 2016 · 17 / 32

  1. CVE-2016-5403Qemu: virtio: unbounded memory allocation on host via guest leading to DoS
  2. CVE-2016-5400kernel: memory leak in airspy usb driver
  3. CVE-2016-5399php: Improper error handling in bzread()
  4. CVE-2016-5397thrift: Improper file path sanitization in t_go_generator.cc:format_go_output() of the go client library can allow an attacker to inject commands
  5. CVE-2016-5391libreswan: IKEv2 bogus proposal lacking DH transform causes pluto daemon restart
  6. CVE-2016-5388Tomcat: CGI sets environmental variable based on user supplied Proxy request header
  7. CVE-2016-5387HTTPD: sets environmental variable based on user supplied Proxy request header
  8. CVE-2016-5386Go: sets environmental variable based on user supplied Proxy request header
  9. CVE-2016-5385PHP: sets environmental variable based on user supplied Proxy request header
  10. CVE-2016-5384fontconfig: Possible double free due to insufficiently validated cache files
  11. CVE-2016-5361IKEv1 protocol is vulnerable to DoS amplification attack
  12. CVE-2016-5360haproxy: denial of service via reqdeny
  13. CVE-2016-5359wireshark: WBXML infinite loop (wnpa-sec-2016-38)
  14. CVE-2016-5358wireshark: Ethernet dissector crash (wnpa-sec-2016-37)
  15. CVE-2016-5357wireshark: NetScreen file parser crash (wnpa-sec-2016-36)
  16. CVE-2016-5356wireshark: CoSine file parser crash (wnpa-sec-2016-35)
  17. CVE-2016-5355wireshark: Toshiba file parser crash (wnpa-sec-2016-34)
  18. CVE-2016-5354wireshark: USB dissector crash (wnpa-sec-2016-33)
  19. CVE-2016-5353wireshark: UMTS FP crash (wnpa-sec-2016-32)
  20. CVE-2016-5352wireshark: IEEE 802.11 dissector crash (wnpa-sec-2016-31)
  21. CVE-2016-5351wireshark: IEEE 802.11 dissector crash (wnpa-sec-2016-30)
  22. CVE-2016-5350wireshark: SPOOLS infinite loop (wnpa-sec-2016-29)
  23. CVE-2016-5344kernel: multiple integer overflows in the MDSS driver
  24. CVE-2016-5342kernel: Heap-based buffer overflow in wcnss_wlan_write function
  25. CVE-2016-5338Qemu: scsi: esp: OOB r/w access while processing ESP_FIFO
  26. CVE-2016-5337Qemu: scsi: megasas: information leakage in megasas_ctrl_get_info
  27. CVE-2016-5323libtiff: more tiffcrop readSeparateTilesIntoBuffer() memory corruption
  28. CVE-2016-5322libtiff: Out-of-bounds read in extractContigSamplesBytes() function
  29. CVE-2016-5321libtiff: tiffcrop readSeparateTilesIntoBuffer() memory corruption
  30. CVE-2016-5320libtiff: Out-of-bounds write in PixarLogDecode() function in tif_pixarlog.c
  31. CVE-2016-5319libtiff: Heap-based buffer overflow in bmp2tiff
  32. CVE-2016-5318libtiff: Stack-based buffer overflow in thumbnail's _TIFFVGetField function
  33. CVE-2016-5317libtiff: Out-of-bounds write in PixarLogDecode() function in libtiff.so
  34. CVE-2016-5316libtiff: Out-of-bounds read in PixarLogCleanup() function in tif_pixarlog.c
  35. CVE-2016-5315libtiff: Out-of-bounds read in setByteArray() function in tif_dir.c
  36. CVE-2016-5314libtiff: Out-of-bounds write in PixarLogDecode() function
  37. CVE-2016-5300expat: Little entropy used for hash initialization
  38. CVE-2016-5297Mozilla: Incorrect argument length checking in Javascript (MFSA 2016-89, MFSA 2016-90)
  39. CVE-2016-5296Mozilla: Heap-buffer-overflow WRITE in rasterize_edges_1 (MFSA 2016-89, MFSA 2016-90)
  40. CVE-2016-5292Mozilla: URL parsing causes crash (MFSA 2016-89)
  41. CVE-2016-5291Mozilla: Same-origin policy violation using local HTML file and saved shortcut file (MFSA 2016-89, MFSA 2016-90)
  42. CVE-2016-5290Mozilla: Memory safety bugs fixed in Firefox 45.5 (MFSA 2016-90)
  43. CVE-2016-5289Mozilla: Memory safety bugs fixed in Firefox 50 (MFSA 2016-89)
  44. CVE-2016-5288firefox: Web content can read cache entries
  45. CVE-2016-5287firefox: Crash in nsTArray_base
  46. CVE-2016-5285nss: Missing NULL check in PK11_SignWithSymKey / ssl3_ComputeRecordMACConstantTime causes server crash
  47. CVE-2016-5284Mozilla: Add-on update site certificate pin expiration (MFSA 2016-85, MFSA 2016-86)
  48. CVE-2016-5283Mozilla: iframe src fragment timing attack can reveal cross-origin data (MFSA 2016-85)
  49. CVE-2016-5282Mozilla: Don't allow content to request favicons from non-whitelisted schemes (MFSA 2016-85)
  50. CVE-2016-5281Mozilla: use-after-free in DOMSVGLength (MFSA 2016-85, MFSA 2016-86)
CVE 2016 document archive — Page 17 | PulseLinux