PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2016 document archive · 24

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,572 documents · Identifier year 2016 · 24 / 32

  1. CVE-2016-3424mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU July 2016)
  2. CVE-2016-3191pcre: workspace overflow for (*ACCEPT) with deeply nested parentheses (8.39/13, 10.22/12)
  3. CVE-2016-3190cairo: out of bounds read in fill_xrgb32_lerp_opaque_spans
  4. CVE-2016-3189bzip2: heap use after free in bzip2recover
  5. CVE-2016-3186libtiff: buffer overflow in gif2tiff
  6. CVE-2016-3185php: Type confusion vulnerability in make_http_soap_request()
  7. CVE-2016-3183openjpeg: Out-of-bounds read in sycc422_to_rgb function
  8. CVE-2016-3182openjpeg: Heap corruption in opj_free function
  9. CVE-2016-3181openjpeg: Out-of-bounds read in opj_tcd_free_tile function
  10. CVE-2016-3177giflib: Use-after-free in gifcolor utility
  11. CVE-2016-3157kernel: xen: Privilege escalation on 64-bit Xen PV domains with IO port access privileges (XSA-171)
  12. CVE-2016-3156kernel: ipv4: denial of service when destroying a network interface
  13. CVE-2016-3142php: Out-of-bounds read in phar_parse_zipfile()
  14. CVE-2016-3141php: Use after free in WDDX Deserialize when processing XML data
  15. CVE-2016-3140kernel: Crash on invalid USB device descriptors (digi_acceleport driver)
  16. CVE-2016-3139kernel: Crash on invalid USB device descriptors (wacom driver)
  17. CVE-2016-3138kernel: Crash on invalid USB device descriptors (cdc_acm driver)
  18. CVE-2016-3137kernel: Crash on invalid USB device descriptors (cypress_m8 driver)
  19. CVE-2016-3136kernel: Crash on invalid USB device descriptors (mct_u232 driver)
  20. CVE-2016-3135kernel: netfilter: size overflow in x_tables
  21. CVE-2016-3134kernel: netfilter: missing bounds check in ipt_entry structure
  22. CVE-2016-3132php: Double free in SplDoublyLinkedList::offsetSet
  23. CVE-2016-3120krb5: S4U2Self KDC crash when anon is restricted
  24. CVE-2016-3119krb5: null pointer dereference in kadmin
  25. CVE-2016-3115openssh: missing sanitisation of input for X11 forwarding
  26. CVE-2016-3113ovirt-engine: Reflected XSS when submitting config file for VNC/SPICE Connection
  27. CVE-2016-3105mercurial: arbitrary code execution when converting git repos
  28. CVE-2016-3099mod_nss: Invalid handling of +CIPHER operator
  29. CVE-2016-3092tomcat: Usage of vulnerable FileUpload package can result in denial of service
  30. CVE-2016-3078php: Heap overflow caused by integer overflow when reading zip files in ZipArchive
  31. CVE-2016-3076python-pillow: buffer overflow in Jpeg2kEncode.c
  32. CVE-2016-3075glibc: Stack overflow in nss_dns_getnetbyname_r
  33. CVE-2016-3074php: Signedness vulnerability causing heap overflow in libgd
  34. CVE-2016-3071libreswan: DoS when receiving an IKE transforn containing AES_XCBC
  35. CVE-2016-3070kernel: Null pointer dereference in trace_writeback_dirty_page()
  36. CVE-2016-3069mercurial: convert extension command injection via git repository names
  37. CVE-2016-3068mercurial: command injection via git subrepository urls
  38. CVE-2016-3066spice-gtk: hijacks clipboard and sends contents to remote servers
  39. CVE-2016-3065postgresql: memory disclosure in pageinspect functions
  40. CVE-2016-3044kernel: Infinite loop vulnerability in KVM
  41. CVE-2016-2858Qemu: rng-random: arbitrary stack based allocation leading to corruption
  42. CVE-2016-2857Qemu: net: out of bounds read in net_checksum_calculate()
  43. CVE-2016-2854kernel: aufs module does not properly maintain POSIX ACL xattr data
  44. CVE-2016-2853kernel: aufs module does not properly restrict the mount namespace
  45. CVE-2016-2848bind: assertion failure triggered by a packet with malformed options
  46. CVE-2016-2847kernel: pipe: limit the per-user amount of pages allocated in pipes
  47. CVE-2016-2842openssl: doapr_outch function does not verify that certain memory allocation succeeds
  48. CVE-2016-2841Qemu: net: ne2000: infinite loop in ne2000_receive
  49. CVE-2016-2839Mozilla: Cairo rendering crash due to memory allocation issue with FFMpeg 0.10 (MFSA 2016-65)
  50. CVE-2016-2838Mozilla: Buffer overflow rendering SVG with bidirectional content (MFSA 2016-64)
CVE 2016 document archive — Page 24 | PulseLinux