PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2016 document archive · 21

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,572 documents · Identifier year 2016 · 21 / 32

  1. CVE-2016-4486kernel: Information leak in rtnetlink
  2. CVE-2016-4485kernel: Information leak in llc module
  3. CVE-2016-4484dracut: Brute force attack on LUKS password decryption via initramfs
  4. CVE-2016-4483libxml2: out-of-bounds read
  5. CVE-2016-4482kernel: information leak in devio.c
  6. CVE-2016-4477wpa_supplicant: local configuration update allows privilege escalation
  7. CVE-2016-4476hostapd: denial of service via crafted WPA/WPA2 passphrase parameter
  8. CVE-2016-4473php: Invalid free() instead of efree() in phar_extract_file()
  9. CVE-2016-4472expat: Undefined behavior and pointer overflows
  10. CVE-2016-4470kernel: Uninitialized variable in request_key handling causes kernel crash in error handling path
  11. CVE-2016-4463xerces-c: Stack overflow when parsing deeply nested DTD
  12. CVE-2016-4456gnutls: Environment variable GNUTLS_KEYLOGFILE is obtained via insecure getenv()
  13. CVE-2016-4455subscription-manager: sensitive world readable files in /var/lib/rhsm/
  14. CVE-2016-4454Qemu: display: vmsvga: out-of-bounds read in vmsvga_fifo_read_raw() routine
  15. CVE-2016-4453Qemu: display: vmsvga: infinite loop in vmsvga_fifo_run() routine
  16. CVE-2016-4449libxml2: Inappropriate fetch of entities content
  17. CVE-2016-4448libxml2: Format string vulnerability
  18. CVE-2016-4447libxml2: Heap-based buffer underreads due to xmlParseName
  19. CVE-2016-4446setroubleshoot-plugins: insecure commands.getoutput use in the allow_execstack plugin
  20. CVE-2016-4445setroubleshoot: insecure use of commands.getstatusoutput in sealert
  21. CVE-2016-4444setroubleshoot-plugins: insecure commands.getstatusoutput use in the allow_execmod plugin
  22. CVE-2016-4441Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in get_cmd
  23. CVE-2016-4440Kernel: kvm: vmx: incorrect state update leading to MSR access
  24. CVE-2016-4439Qemu: scsi: esp: OOB write while writing to 's->cmdbuf' in esp_reg_write
  25. CVE-2016-4429glibc: libtirpc: stack (frame) overflow in Sun RPC clntudp_call()
  26. CVE-2016-4425jansson: stack exhaustion parsing a JSON file
  27. CVE-2016-4421wireshark: ASN.1 BER dissector crash. (wnpa-sec-2016-18)
  28. CVE-2016-4420wireshark: NFS dissector crash (wnpa-sec-2016-17)
  29. CVE-2016-4419wireshark: SPICE dissector large loop (wnpa-sec-2016-16)
  30. CVE-2016-4418wireshark: ASN.1 BER dissector crash (wnpa-sec-2016-15)
  31. CVE-2016-4417wireshark: GSM A-bis OML dissector crash (wnpa-sec-2016-14)
  32. CVE-2016-4416wireshark: IEEE 802.11 dissector crash (wnpa-sec-2016-13)
  33. CVE-2016-4415wireshark: Ixia IxVeriWave file parser crash (wnpa-sec-2016-12)
  34. CVE-2016-4356libksba: encoding of invalid utf-8 strings in DN decoder src/dn.c (append_quoted, append_atv)
  35. CVE-2016-4355libksba: integer overflow in the BER decoder src/ber-decoder.c (ber_decoder_s)
  36. CVE-2016-4354libksba: integer overflow in the BER decoder src/ber-decoder.c (ber_decoder_s)
  37. CVE-2016-4353libksba: denial of service due to stack overflow in src/ber-decoder.c (push_decoder_state, pop_decoder_state)
  38. CVE-2016-4348librsvg2: DoS parsing SVGs with circular definitions _rsvg_css_normalize_font_size() function
  39. CVE-2016-4347librsvg2:
  40. CVE-2016-4346php: Multiple heap overflows due to integer overflows
  41. CVE-2016-4345php: Multiple heap overflows due to integer overflows
  42. CVE-2016-4344php: Multiple heap overflows due to integer overflows
  43. CVE-2016-4343php: Uninitialized pointer in phar_make_dirstream()
  44. CVE-2016-4342php: use of uninitialized pointer in PharFileInfo::getContent
  45. CVE-2016-4324libreoffice: Dereference of invalid STL iterator on processing RTF file
  46. CVE-2016-4323pidgin: MXIT Splash Image Arbitrary File Overwrite Vulnerability
  47. CVE-2016-4302libarchive: Heap buffer overflow in the Rar decompression functionality
  48. CVE-2016-4301libarchive: Stack buffer overflow in the mtree parse_device
  49. CVE-2016-4300libarchive: Heap buffer overflow vulnerability in the 7zip read_SubStreamsInfo
  50. CVE-2016-4085wireshark: NCP dissector crash (wnpa-sec-2016-28)
CVE 2016 document archive — Page 21 | PulseLinux