PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2016 document archive · 2

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,572 documents · Identifier year 2016 · 2 / 32

  1. CVE-2016-10250jasper: Null pointer dereference in jp2_colr_destroy (incomplete fix for CVE-2016-8887)
  2. CVE-2016-10249jasper: integer overflow in jas_matrix_create()
  3. CVE-2016-10248jasper: NULL pointer dereference in jpc_tsfb_synthesize()
  4. CVE-2016-10245doxygen: cross-site scripting in templates/html/search_opensearch.php
  5. CVE-2016-10244freetype: parse_charstrings function in type1/t1load.c does not ensure that a font contains a glyph name
  6. CVE-2016-10243texlive: mpost allows to run non-whitelisted external programs
  7. CVE-2016-10229kernel: net: Unsafe second checksum calculation in udp.c
  8. CVE-2016-10228glibc: iconv program can hang when invoked with the -c option
  9. CVE-2016-10220ghostscript: NULL pointer dereference in the gs_makewordimagedevice function
  10. CVE-2016-10219ghostscript: Divide-by-zero in the intersect function
  11. CVE-2016-10218ghostscript: NULL pointer dereference in the pfd14_pop_transparency_group function
  12. CVE-2016-10217ghostscript: Use-after-free in the pdf14_open function
  13. CVE-2016-10209libarchive: NULL pointer dereference in archive_wstring_append_from_mbs function
  14. CVE-2016-10208kernel: EXT4 memory corruption / SLAB out-of-bounds read
  15. CVE-2016-10207tigervnc: VNC server can crash when TLS handshake terminates early
  16. CVE-2016-10200kernel: l2tp: Race condition in the L2TPv3 IP encapsulation feature
  17. CVE-2016-10199gstreamer-plugins-good: Out of bounds read in qtdemux_tag_add_str_full
  18. CVE-2016-10198gstreamer-plugins-good: Invalid memory read in gst_aac_parse_sink_setcaps
  19. CVE-2016-10197libevent: Out-of-bounds read in search_make_new()
  20. CVE-2016-10196libevent: Stack-buffer overflow in evutil_parse_sockaddr_port()
  21. CVE-2016-10195libevent: Stack-buffer overflow in the name_parse() function
  22. CVE-2016-10172wavpack: Heap out of bounds read in read_new_config_info / open_utils.c
  23. CVE-2016-10171wavpack: Heap out of bounds read in unreorder_channels / wvunpack.c
  24. CVE-2016-10170wavpack: Heap out of bounds read in WriteCaffHeader / caff.c
  25. CVE-2016-10169wavpack: Global buffer overread in read_code / read_words.c
  26. CVE-2016-10168gd: Integer overflow in gd_io.c
  27. CVE-2016-10167gd: DoS vulnerability in gdImageCreateFromGd2Ctx()
  28. CVE-2016-10166gd: Unsigned integer underflow _gdContributionsAlloc()
  29. CVE-2016-10165lcms2: Out-of-bounds read in Type_MLU_Read()
  30. CVE-2016-10164libXpm: Out-of-bounds write in XPM extension parsing
  31. CVE-2016-10162php: Null pointer dereference when unserializing PHP object
  32. CVE-2016-10161php: Out-of-bounds heap read on unserialize in finish_nested_data()
  33. CVE-2016-10160php: Off-by-one error in phar_parse_pharfile when loading crafted phar archive
  34. CVE-2016-10159php: Integer overflow in phar_parse_pharfile
  35. CVE-2016-10158php: Wrong calculation in exif_convert_any_to_int function
  36. CVE-2016-10156systemd: systemd creates world-writable suid files allowing root privilege escalation
  37. CVE-2016-10155Qemu: watchdog: memory leakage in virtual hardware watchdog wdt_i6300esb
  38. CVE-2016-10154kernel: smbencrypt() points a scatterlist to the stack causing DoS
  39. CVE-2016-10153kernel: introduce ceph_crypt() for in-place en/decryption
  40. CVE-2016-10152hesiod: Use of hard-coded unsafe configuration if configuration file cannot be opened
  41. CVE-2016-10151hesiod: Weak SUID check allowing privilege elevation
  42. CVE-2016-10150Kernel: Kvm: a use-after-free while creating devices
  43. CVE-2016-10147kernel: Kernel crash by spawning mcrypt(alg) with incompatible algorithm
  44. CVE-2016-10146ImageMagick: Memory leak in caption and label handling
  45. CVE-2016-10145ImageMagick: Off-by-one error in wpg.c
  46. CVE-2016-10144ImageMagick: ipl file missing malloc check
  47. CVE-2016-10142kernel - IPV6 fragmentation flaw
  48. CVE-2016-10109pcsc-lite: Use-after-free of cardsList due to SCardReleaseContext invocations
  49. CVE-2016-10095libtiff: Stack-based buffer overflow in _TIFFVGetField
  50. CVE-2016-10094libtiff: Off-by-one error in t2p_readwrite_pdf_image_tile() causing heap buffer overflow
CVE 2016 document archive — Page 2 | PulseLinux