PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2016 document archive · 27

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,572 documents · Identifier year 2016 · 27 / 32

  1. CVE-2016-2368pidgin: MXIT g_snprintf Multiple Buffer Overflow Vulnerabilities
  2. CVE-2016-2367pidgin: MXIT Avatar Length Memory Disclosure Vulnerability
  3. CVE-2016-2366pidgin: MXIT Table Command Denial of Service Vulnerability
  4. CVE-2016-2365pidgin: MXIT Markup Command Denial of Service Vulnerability
  5. CVE-2016-2342quagga: VPNv4 NLRI parser memcpys to stack on unchecked length
  6. CVE-2016-2339ruby: Fiddle:: Function.new heap buffer overflow
  7. CVE-2016-2338ruby: heap buffer overflow in the Psych::Emitter start_document function
  8. CVE-2016-2337ruby: TclTkIp ip_cancel_eval type confusion vulnerability
  9. CVE-2016-2336ruby: WIN32OLE ole_invoke and ole_query_interface type confusion vulnerabilities
  10. CVE-2016-2324git: path_name() integer truncation and overflow leading to buffer overflow
  11. CVE-2016-2315git: path_name() integer truncation and overflow leading to buffer overflow
  12. CVE-2016-2226gcc: Exploitable buffer overflow
  13. CVE-2016-2217socat: Hard coded 1024 bit DH p parameter was not prime
  14. CVE-2016-2198Qemu: usb: ehci null pointer dereference in ehci_caps_write
  15. CVE-2016-2197Qemu: ide: ahci null pointer dereference when using FIS CLB engines
  16. CVE-2016-2193postgresql: row security policies in prepared statements disregard user ID changes
  17. CVE-2016-2191optipng: Invalid write while processing delta escapes without any boundary checking
  18. CVE-2016-2188kernel: Kernel panic on invalid USB device descriptor (iowarrior driver)
  19. CVE-2016-2187kernel: Kernel panic on invalid USB device descriptor (gtco driver)
  20. CVE-2016-2186kernel: Kernel panic on invalid USB device descriptor (powermate driver)
  21. CVE-2016-2185kernel: Kernel panic on invalid USB device descriptor (ati_remote2 driver)
  22. CVE-2016-2184kernel: Kernel panic on invalid USB device descriptor (snd_usb_audio driver)
  23. CVE-2016-2183SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)
  24. CVE-2016-2182openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec()
  25. CVE-2016-2181openssl: DTLS replay protection bypass allows DoS against DTLS connection
  26. CVE-2016-2180OpenSSL: OOB read in TS_OBJ_print_bio()
  27. CVE-2016-2179openssl: DTLS memory exhaustion DoS when messages are not removed from fragment buffer
  28. CVE-2016-2178openssl: Non-constant time codepath followed for certain operations in DSA implementation
  29. CVE-2016-2177openssl: Possible integer overflow vulnerabilities in codebase
  30. CVE-2016-2176openssl: EBCDIC overread in X509_NAME_oneline()
  31. CVE-2016-2168subversion: DoS in mod_authz_svn during COPY/MOVE authorization check
  32. CVE-2016-2167subversion: svnserve/sasl may authenticate users using the wrong realm
  33. CVE-2016-2161httpd: DoS vulnerability in mod_auth_digest
  34. CVE-2016-2150spice: Host memory access from guest with invalid primary surface parameters
  35. CVE-2016-2146mod_auth_mellon: Failure to limit amount of POST data submitted by client
  36. CVE-2016-2145mod_auth_mellon: Missing error check when calling ap_get_client_block()
  37. CVE-2016-2143kernel: Fork of large process causes memory corruption
  38. CVE-2016-2141JGroups: Authorization bypass
  39. CVE-2016-2126samba: Flaws in Kerberos PAC validation can trigger privilege elevation
  40. CVE-2016-2125samba: Unconditional privilege delegation to Kerberos servers in trusted realms
  41. CVE-2016-2124samba: SMB1 client connections can be downgraded to plaintext authentication
  42. CVE-2016-2123samba: NDR Parsing ndr_pull_dnsp_name Heap-based Buffer Overflow Remote Code Execution Vulnerability (ZDI-CAN-3995)
  43. CVE-2016-2119samba: Client side SMB2/3 required signing can be downgraded
  44. CVE-2016-2118samba: SAMR and LSA man in the middle attacks
  45. CVE-2016-2117kernel: Kernel memory leakage to ethernet frames due to buffer overflow in ethernet drivers
  46. CVE-2016-2116jasper: memory leak in jas_iccprof_createfrombuf()
  47. CVE-2016-2115samba: Smb signing not required by default when smb client connection is used for ipc usage
  48. CVE-2016-2114samba: Samba based active directory domain controller does not enforce smb signing
  49. CVE-2016-2113samba: Server certificates not validated at client side
  50. CVE-2016-2112samba: Missing downgrade detection
CVE 2016 document archive — Page 27 | PulseLinux