CVE 2016 document archive · 28
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,572 documents · Identifier year 2016 · 28 / 32
- CVE-2016-2111samba: Spoofing vulnerability when domain controller is configured
- CVE-2016-2110samba: Man-in-the-middle attacks possible with NTLMSSP authentication
- CVE-2016-2109openssl: ASN.1 BIO handling of large amounts of data
- CVE-2016-2108openssl: Memory corruption in the ASN.1 encoder
- CVE-2016-2107openssl: Padding oracle in AES-NI CBC MAC check
- CVE-2016-2106openssl: EVP_EncryptUpdate overflow
- CVE-2016-2105openssl: EVP_EncodeUpdate overflow
- CVE-2016-2099xerces-c: Use-after-free in heap on specially crafted XML input
- CVE-2016-2091libdwarf: Out-of-bounds read in dwarf_frame2.c
- CVE-2016-2089jasper: matrix rows_ NULL pointer dereference in jas_matrix_clip()
- CVE-2016-2088bind: malformed packet containing multiple cookie options can trigger assertion failure
- CVE-2016-2085kernel: timing side channel vulnerability in the Linux Extended Verification Module
- CVE-2016-2073libxml2: out-of-bounds read in htmlParseNameComplex()
- CVE-2016-2070kernel: potential division by zero in TCP code
- CVE-2016-2069kernel: race condition in the TLB flush logic
- CVE-2016-2066kernel: integer signedness error in the MSM QDSP6 audio driver
- CVE-2016-2064kernel: DoS in MSM QDSP6 audio driver
- CVE-2016-2063kernel: stack-based buffer overflow in the supply_lm_input_write function in drivers/thermal/supply_lm_core.c
- CVE-2016-2061kernel: DoS in MSM V4L2 video driver
- CVE-2016-2053kernel: Kernel panic and system lockup by triggering BUG_ON() in public_key_verify_signature()
- CVE-2016-2052chromium-browser: Multiple unspecified vulnerabilities in HarfBuzz before 1.0.6
- CVE-2016-2050libdwarf: Out-of-bounds write in get_abbrev_array_info
- CVE-2016-2047mysql: ssl-validate-cert incorrect hostname check
- CVE-2016-2037cpio: out of bounds write
- CVE-2016-1981Qemu: net: e1000 infinite loop in start_xmit and e1000_receive_iov routines
- CVE-2016-1979nss: Use-after-free during processing of DER encoded keys in NSS (MFSA 2016-36)
- CVE-2016-1978nss: Use-after-free in NSS during SSL connections in low memory (MFSA 2016-15)
- CVE-2016-1977graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)
- CVE-2016-1976Mozilla: WebRTC and LibVPX vulnerabilities found through code inspection (MFSA 2016-32)
- CVE-2016-1975Mozilla: WebRTC and LibVPX vulnerabilities found through code inspection (MFSA 2016-32)
- CVE-2016-1974Mozilla: Out-of-bounds read in HTML parser following a failed allocation (MFSA 2016-34)
- CVE-2016-1973Mozilla: Use-after-free in GetStaticInstance in WebRTC (MFSA 2016-33)
- CVE-2016-1972Mozilla: WebRTC and LibVPX vulnerabilities found through code inspection (MFSA 2016-32)
- CVE-2016-1971Mozilla: WebRTC and LibVPX vulnerabilities found through code inspection (MFSA 2016-32)
- CVE-2016-1970Mozilla: WebRTC and LibVPX vulnerabilities found through code inspection (MFSA 2016-32)
- CVE-2016-1969mozilla: out-of-bounds write with malicious font in graphite2 (MFSA 2016-38)
- CVE-2016-1968Mozilla: Buffer overflow in Brotli decompression (MFSA 2016-30)
- CVE-2016-1967Mozilla: Same-origin policy violation using perfomance.getEntries and history navigation with session restore (MFSA 2016-29)
- CVE-2016-1966Mozilla: Memory corruption with malicious NPAPI plugin (MFSA 2016-31)
- CVE-2016-1965Mozilla: Addressbar spoofing though history navigation and Location protocol property (MFSA 2016-28)
- CVE-2016-1964Mozilla: Use-after-free during XML transformations (MFSA 2016-27)
- CVE-2016-1963Mozilla: Memory corruption when modifying a file being read by FileReader (MFSA 2016-26)
- CVE-2016-1962Mozilla: Use-after-free when using multiple WebRTC data channels (MFSA 2016-25)
- CVE-2016-1961Mozilla: Use-after-free in SetBody (MFSA 2016-24)
- CVE-2016-1960Mozilla: Use-after-free in HTML5 string parser (MFSA 2016-23)
- CVE-2016-1959Mozilla: Service Worker Manager out-of-bounds read in Service Worker Manager (MFSA 2016-22)
- CVE-2016-1958Mozilla: Displayed page address can be overridden (MFSA 2016-21)
- CVE-2016-1957Mozilla: Memory leak in libstagefright when deleting an array during MP4 processing (MFSA 2016-20)
- CVE-2016-1956Mozilla: Linux video memory DOS with Intel drivers (MFSA 2016-19)
- CVE-2016-1955Mozilla: CSP reports fail to strip location information for embedded iframe pages (MFSA 2016-18)