CVE 2016 document archive · 29
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,572 documents · Identifier year 2016 · 29 / 32
- CVE-2016-1954Mozilla: Local file overwriting and potential privilege escalation through CSP reports (MFSA 2016-17)
- CVE-2016-1953Mozilla: Miscellaneous memory safety hazards (rv:45.0) (MFSA 2016-16)
- CVE-2016-1952Mozilla: Miscellaneous memory safety hazards (rv:38.7) (MFSA 2016-16)
- CVE-2016-1951nspr: Memory allocation issue related to PR_*printf functions
- CVE-2016-1950nss: Heap buffer overflow vulnerability in ASN1 certificate parsing (MFSA 2016-35)
- CVE-2016-1949firefox: Same-origin-policy violation using Service Workers with plugins
- CVE-2016-1947Mozilla: Application Reputation service disabled in Firefox 43 (MFSA 2016-11)
- CVE-2016-1946Mozilla: Unsafe memory manipulation found through code inspection (MFSA 2016-10)
- CVE-2016-1945Mozilla: Unsafe memory manipulation found through code inspection (MFSA 2016-10)
- CVE-2016-1944Mozilla: Unsafe memory manipulation found through code inspection (MFSA 2016-10)
- CVE-2016-1943Mozilla: Addressbar spoofing attacks (MFSA 2016-09)
- CVE-2016-1939Mozilla: Firefox allows for control characters to be set in cookie names (MFSA 2016-04)
- CVE-2016-1938NSS: Errors in mp_div and mp_exptmod cryptographic functions
- CVE-2016-1937Mozilla: Missing delay following user click events in protocol handler dialog (MFSA 2016-06)
- CVE-2016-1935Mozilla: Buffer overflow in WebGL after out of memory allocation (MFSA 2016-03)
- CVE-2016-1933Mozilla: Out of Memory crash when parsing GIF format images (MFSA 2016-02)
- CVE-2016-1931Mozilla: Miscellaneous memory safety hazards (rv:44.0) (MFSA 2016-01)
- CVE-2016-1930Mozilla: Miscellaneous memory safety hazards (rv:38.6) (MFSA 2016-01)
- CVE-2016-1924openjpeg: out of bounds read in opj_tgt_reset
- CVE-2016-1923openjpeg: out of bounds read in opj_j2k_update_image_data
- CVE-2016-1922Qemu: i386: null pointer dereference in vapic_write()
- CVE-2016-1908openssh: possible fallback from untrusted to trusted X11 forwarding
- CVE-2016-1907openssh: out-of-bounds read in packet handling code
- CVE-2016-1906server: build config to a strategy that isn't allowed by policy
- CVE-2016-1905server: patch operation should use patched object to check admission control
- CVE-2016-1904php: heap buffer overflow in escapeshell functions
- CVE-2016-1903php: Out-of-bounds memory read via gdImageRotateInterpolated
- CVE-2016-1867jasper: out-of-bounds read in jpc_pi_nextcprl()
- CVE-2016-1841libxslt: Use after free in xsltDocumentFunctionLoadDocument
- CVE-2016-1840libxml2: Heap-buffer-overflow in xmlFAParserPosCharGroup
- CVE-2016-1839libxml2: Heap-based buffer overread in xmlDictAddString
- CVE-2016-1838libxml2: Heap-based buffer overread in xmlPArserPrintFileContextInternal
- CVE-2016-1837libxml2: Heap use-after-free in htmlPArsePubidLiteral and htmlParseSystemiteral
- CVE-2016-1836libxml2: Heap use-after-free in xmlDictComputeFastKey
- CVE-2016-1835libxml2: Heap use-after-free in xmlSAX2AttributeNs
- CVE-2016-1834libxml2: Heap-buffer-overflow in xmlStrncat
- CVE-2016-1833libxml2: Heap-based buffer overread in htmlCurrentChar
- CVE-2016-1762libxml2: Heap-based buffer-overread in xmlNextChar
- CVE-2016-1714Qemu: nvram: OOB r/w access in processing firmware configurations
- CVE-2016-1684chromium-browser: integer overflow in libxslt
- CVE-2016-1683chromium-browser: out-of-bounds access in libxslt
- CVE-2016-1621libvpx: remote code execution via crafted media file
- CVE-2016-1583kernel: Stack overflow via ecryptfs and /proc/$pid/environ
- CVE-2016-1577jasper: double free issue in jas_iccattrval_destroy()
- CVE-2016-1568Qemu: ide: ahci use-after-free vulnerability in aio port commands
- CVE-2016-1567chrony: missing key check allows impersonation between authenticated peers (VU#357792)
- CVE-2016-1551ntp: ntpd reference clock impersonation
- CVE-2016-1550ntp: libntp message digest disclosure
- CVE-2016-1549ntp: ephemeral association time spoofing
- CVE-2016-1548ntp: ntpd switching to interleaved mode with spoofed packets