CVE 2016 document archive · 26
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,572 documents · Identifier year 2016 · 26 / 32
- CVE-2016-2572squid: wrong error handling for malformed HTTP responses
- CVE-2016-2571squid: wrong error handling for malformed HTTP responses
- CVE-2016-2570squid: some code paths fail to check bounds in string object
- CVE-2016-2569squid: some code paths fail to check bounds in string object
- CVE-2016-2568polkit: Program run via pkexec as unprivileged user can escape to parent session via TIOCSTI ioctl
- CVE-2016-2554php: buffer overflow in handling of long link names in tar phar archives
- CVE-2016-2550kernel: incorrectly accounted in-flight fds
- CVE-2016-2549kernel: sound: spinlock lockup in sound/core/timer.c
- CVE-2016-2548kernel: sound: linked lists of slave instances not unlinked immediately
- CVE-2016-2547kernel: sound: use-after-free in snd_timer_user_ioctl
- CVE-2016-2546kernel: sound: GPF in snd_timer_user_params
- CVE-2016-2545kernel: sound: use-after-free in snd_timer_interrupt
- CVE-2016-2544kernel: sound: use-after-free in snd_timer_stop
- CVE-2016-2543kernel: sound: GPF in snd_seq_fifo_clear
- CVE-2016-2538Qemu: usb: integer overflow in remote NDIS control message handling
- CVE-2016-2533python-pillow: Buffer overflow in PCD decoding
- CVE-2016-2532wireshark: LLRP dissector crash (wnpa-sec-2016-11)
- CVE-2016-2531wireshark: RSL dissector crash (wnpa-sec-2016-10)
- CVE-2016-2530wireshark: RSL dissector crash (wnpa-sec-2016-10)
- CVE-2016-2529wireshark: iSeries file parser crash (wnpa-sec-2016-09)
- CVE-2016-2528wireshark: LBMC dissector crash (wnpa-sec-2016-08)
- CVE-2016-2527wireshark: 3GPP TS 32.423 Trace file parser crash (wnpa-sec-2016-07)
- CVE-2016-2526wireshark: HiQnet dissector crash (wnpa-sec-2016-06)
- CVE-2016-2525wireshark: HTTP/2 dissector crash (wnpa-sec-2016-05)
- CVE-2016-2524wireshark: X.509AF crash (wnpa-sec-2016-04)
- CVE-2016-2523wireshark: DNP3 dissector infinite loop (wnpa-sec-2016-03)
- CVE-2016-2522wireshark: ASN.1 BER dissector crash (wnpa-sec-2016-02)
- CVE-2016-2521wireshark: DLL hijacking vulnerability (wnpa-sec-2016-01)
- CVE-2016-2519ntp: ctl_getitem() return value not always checked
- CVE-2016-2518ntp: out-of-bounds references on crafted packet
- CVE-2016-2517ntp: certain remote configuration values not properly validated
- CVE-2016-2516ntp: assertion failure in ntpd on duplicate IPs on unconfig directives
- CVE-2016-2392Qemu: usb: null pointer dereference in remote NDIS control message handling
- CVE-2016-2391Qemu: usb: multiple eof_timers in ohci module leads to null pointer dereference
- CVE-2016-2390squid: incorrect server error handling resulting in denial of service
- CVE-2016-2384kernel: double-free in usb-audio triggered by invalid USB descriptor
- CVE-2016-2383kernel: incorrect branch fixups for eBPG allow arbitrary read
- CVE-2016-2381perl: ambiguous environment variables handling
- CVE-2016-2380pidgin: MXIT mxit_convert_markup_tx Information Leak Vulnerability
- CVE-2016-2379pidgin: Eavesdropping hashed password when logging
- CVE-2016-2378pidgin: MXIT get_utf8_string Code Execution Vulnerability
- CVE-2016-2377pidgin: MXIT HTTP Content-Length Buffer Overflow Vulnerability
- CVE-2016-2376pidgin: MXIT read stage 0x3 Code Execution Vulnerability
- CVE-2016-2375pidgin: MXIT Suggested Contacts Memory Disclosure Vulnerability
- CVE-2016-2374pidgin: MXIT MultiMX Message Code Execution Vulnerability
- CVE-2016-2373pidgin: MXIT Contact Mood Denial of Service Vulnerability
- CVE-2016-2372pidgin: MXIT File Transfer Length Memory Disclosure Vulnerability
- CVE-2016-2371pidgin: MXIT Extended Profiles Code Execution Vulnerability
- CVE-2016-2370pidgin: MXIT Custom Resource Denial of Service Vulnerability
- CVE-2016-2369pidgin: MXIT CP_SOCK_REC_TERM Denial of Service Vulnerability