PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2016 document archive · 23

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,572 documents · Identifier year 2016 · 23 / 32

  1. CVE-2016-3707kernel-rt: Sending SysRq command via ICMP echo request
  2. CVE-2016-3706glibc: stack (frame) overflow in getaddrinfo() when called with AF_INET, AF_INET6 (incomplete fix for CVE-2013-4458)
  3. CVE-2016-3705libxml2: stack overflow before detecting invalid XML file
  4. CVE-2016-3699kernel: ACPI table override allowed when securelevel is enabled
  5. CVE-2016-3698libndp: denial of service due to insufficient validation of source of NDP messages
  6. CVE-2016-3695kernel: Error injection via EINJ is allowed when securelevel is enabled
  7. CVE-2016-3689kernel: denial of service via malicious device using ims-pcu driver
  8. CVE-2016-3674XStream: enabled processing of external entities
  9. CVE-2016-3672kernel: unlimiting the stack disables ASLR
  10. CVE-2016-3658libtiff: out-of-bounds read in the TIFFWriteDirectoryTagLongLong8Array function
  11. CVE-2016-3634libtiff: out-of-bounds read in the tagCompare function
  12. CVE-2016-3633libtiff: out-of-bounds read in the _setrow function
  13. CVE-2016-3632libtiff: out-of-bounds write in _TIFFVGetField function
  14. CVE-2016-3631libtiff: thumbnail tool out-of-bounds read vulnerabilities
  15. CVE-2016-3630mercurial: remote code execution in binary delta decoding
  16. CVE-2016-3627libxml2: stack exhaustion while parsing xml files in recovery mode
  17. CVE-2016-3625libtiff: out of bounds read in the tiff2bw tool
  18. CVE-2016-3624libtiff: out of bounds write in the rgb2ycybr tool
  19. CVE-2016-3623libtiff: divide by zero in the rgb2ycybr tool
  20. CVE-2016-3622libtiff: Division by zero in fpAcc function
  21. CVE-2016-3621libtiff: out of bounds read in the bmp2tiff tool
  22. CVE-2016-3620libtiff: Out-of-bound read in ZIPEncode
  23. CVE-2016-3619libtiff: bmp2tiff DumpModeEncode OOB read
  24. CVE-2016-3616libjpeg: null pointer dereference in cjpeg
  25. CVE-2016-3615mysql: unspecified vulnerability in subcomponent: Server: DML (CPU July 2016)
  26. CVE-2016-3614mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU July 2016)
  27. CVE-2016-3610OpenJDK: insufficient value count check in MethodHandles.filterReturnValue() (Libraries, 8158571)
  28. CVE-2016-3606OpenJDK: insufficient bytecode verification (Hotspot, 8155981)
  29. CVE-2016-3598OpenJDK: incorrect handling of MethodHandles.dropArguments() argument (Libraries, 8155985)
  30. CVE-2016-3588mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU July 2016)
  31. CVE-2016-3587OpenJDK: insufficient protection of MethodHandle.invokeBasic() (Hotspot, 8154475)
  32. CVE-2016-3550OpenJDK: integer overflows in bytecode streams (Hotspot, 8152479)
  33. CVE-2016-3521mysql: unspecified vulnerability in subcomponent: Server: Types (CPU July 2016)
  34. CVE-2016-3518mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU July 2016)
  35. CVE-2016-3508OpenJDK: missing entity replacement limits (JAXP, 8149962)
  36. CVE-2016-3501mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU July 2016)
  37. CVE-2016-3500OpenJDK: maximum XML name limit not applied to namespace URIs (JAXP, 8148872)
  38. CVE-2016-3495mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)
  39. CVE-2016-3492mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU October 2016)
  40. CVE-2016-3486mysql: unspecified vulnerability in subcomponent: Server: FTS (CPU July 2016)
  41. CVE-2016-3485OpenJDK: weak authentication secret in Pipe implementation on Windows (Networking, 8145446)
  42. CVE-2016-3477mysql: unspecified vulnerability in subcomponent: Server: Parser (CPU July 2016)
  43. CVE-2016-3471mysql: unspecified vulnerability in subcomponent: Server: Option (CPU July 2016)
  44. CVE-2016-3459mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU July 2016)
  45. CVE-2016-3458OpenJDK: insufficient restrictions on the use of custom ValueHandler (CORBA, 8079718)
  46. CVE-2016-3452mysql: unspecified vulnerability in subcomponent: Server: Security: Encryption (CPU July 2016)
  47. CVE-2016-3440mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU July 2016)
  48. CVE-2016-3427OpenJDK: unrestricted deserialization of authentication credentials (JMX, 8144430)
  49. CVE-2016-3426OpenJDK: non-constant time GCM authentication tag comparison (JCE, 8143945)
  50. CVE-2016-3425OpenJDK: incorrect handling of surrogate pairs in XML attribute values (JAXP, 8143167)
CVE 2016 document archive — Page 23 | PulseLinux