PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2016 document archive · 19

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,572 documents · Identifier year 2016 · 19 / 32

  1. CVE-2016-5095php: Integer overflow in php_filter_full_special_chars
  2. CVE-2016-5094php: Integer overflow in php_html_entities()
  3. CVE-2016-5093php: improper nul termination leading to out-of-bounds read in get_icu_value_internal
  4. CVE-2016-5044libdwarf: Heap-based buffer overflow in update_entry()
  5. CVE-2016-5043libdwarf: Out-of-bounds read in dwarf_dealloc()
  6. CVE-2016-5042libdwarf: Infinite loop in dwarf_get_arranges_list()
  7. CVE-2016-5041libdwarf: Null pointer dereference in _dwarf_file_name_is_full_path()
  8. CVE-2016-5040libdwarf: Null pointer dereference in read_area_length()
  9. CVE-2016-5039libdwarf: Out-of-bounds read in get_attr_value() function
  10. CVE-2016-5038libdwarf: Out-of-bounds read in dwarf_get_macro_startend_file()
  11. CVE-2016-5037libdwarf: Null pointer dereference in _dwarf_load_section
  12. CVE-2016-5036libdwarf: Out-of-bounds read in dump_block
  13. CVE-2016-5035libdwarf: Out-of-bounds read in _dwarf_read_line_table_header
  14. CVE-2016-5034libdwarf: Out-of-bounds write in dwarf_elf_access.c
  15. CVE-2016-5033libdwarf: Out-of-bounds read in print_explroc_content
  16. CVE-2016-5032libdwarf: Out-of-bounds read in dwarf_get_xu_hash_entry()
  17. CVE-2016-5031libdwarf: Out-of-bounds read in print_frame_inst_bytes() function
  18. CVE-2016-5030libdwarf: Null pointer dereference in _dwarf_calculate_info_section_end_ptr()
  19. CVE-2016-5029libdwarf: Null pointer dereference in create_fullest_file_path()
  20. CVE-2016-5028libdwarf: Null pointer dereference in print_frame_inst_bytes()
  21. CVE-2016-5027libdwarf: Null pointer dereference in _dwarf_decode_s_leb128
  22. CVE-2016-5018tomcat: security manager bypass via IntrospectHelper utility function
  23. CVE-2016-5011util-linux: Extended partition loop in MBR partition table leads to DOS
  24. CVE-2016-5010ImageMagick: Out-of-bounds read when processing crafted tiff file
  25. CVE-2016-5009crash: mon_command crashes ceph monitors on receiving empty prefix
  26. CVE-2016-5008libvirt: Setting empty VNC password allows access to unauthorized users
  27. CVE-2016-5007spring: Path matching inconsistency
  28. CVE-2016-5004xmlrpc: DoS through decompression-bomb attack when Content-Encoding=gzip
  29. CVE-2016-5003xmlrpc: Deserialization of untrusted Java object through tag
  30. CVE-2016-5002xmlrpc: XML external entity vulnerability SSRF via a crafted DTD
  31. CVE-2016-5000poi: XML External Entity (XXE) Vulnerability in Apache POI's XLSX2CSV Example
  32. CVE-2016-4998kernel: out of bounds reads when processing IPT_SO_SET_REPLACE setsockopt
  33. CVE-2016-4997kernel: compat IPT_SO_SET_REPLACE setsockopt
  34. CVE-2016-4994gimp: Use-after-free vulnerabilities in the channel and layer properties parsing process
  35. CVE-2016-4993eap: HTTP header injection / response splitting
  36. CVE-2016-4992389-ds-base: Information disclosure via repeated use of LDAP ADD operation
  37. CVE-2016-4989setroubleshoot: command injection issues
  38. CVE-2016-4984openldap-servers: /usr/libexec/openldap/generate-server-cert.sh create world readable password file
  39. CVE-2016-4983dovecot insecure SSL/TLS key and certificate file creation
  40. CVE-2016-4982authd insecure /etc/ident.key file creation
  41. CVE-2016-4979httpd: X509 client certificate authentication bypass using HTTP/2
  42. CVE-2016-4975httpd: CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir
  43. CVE-2016-4973gcc: Targets using libssp for SSP are missing -D_FORTIFY_SOURCE functionality
  44. CVE-2016-4971wget: Lack of filename checking allows arbitrary file upload via FTP redirect
  45. CVE-2016-4964Qemu: scsi: mptsas infinite loop in mptsas_fetch_requests
  46. CVE-2016-4957ntp: crypto-NAK DoS (incorrect fix for CVE-2016-1547)
  47. CVE-2016-4956ntp: broadcast interleave (incomplete fix for CVE-2016-1548)
  48. CVE-2016-4955ntp: autokey association reset
  49. CVE-2016-4954ntp: partial processing of spoofed packets
  50. CVE-2016-4953ntp: bad authentication demobilizes ephemeral associations
CVE 2016 document archive — Page 19 | PulseLinux