PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2016 document archive · 30

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,572 documents · Identifier year 2016 · 30 / 32

  1. CVE-2016-1547ntp: crypto-NAK preemptable association denial of service
  2. CVE-2016-1546httpd: mod_http2 denial-of-service by thread starvation
  3. CVE-2016-1541libarchive: zip_read_mac_metadata() heap-based buffer overflow
  4. CVE-2016-1526graphite2: Out-of-bounds read vulnerability in TfUtil:LocaLookup
  5. CVE-2016-1523graphite2: Heap-based buffer overflow in context item handling functionality
  6. CVE-2016-1522graphite2: Null pointer dereference and out-of-bounds access vulnerabilities
  7. CVE-2016-1521graphite2: Out-of-bound read vulnerability triggered by crafted fonts
  8. CVE-2016-1517opencv: Remote DoS via vectors involving corrupt chunks
  9. CVE-2016-1516opencv: Double free vulnerability on crafted image
  10. CVE-2016-1286bind: malformed signature records for DNAME records can trigger assertion failure
  11. CVE-2016-1285bind: malformed packet sent to rndc can trigger assertion failure
  12. CVE-2016-1283pcre: heap buffer overflow in handling of duplicate named groups (8.39/14)
  13. CVE-2016-1251perl-DBD-MySQL: Use after free when using prepared statements
  14. CVE-2016-1249perl-DBD-MySQL: Out-of-bounds read when using server-side prepared statement support
  15. CVE-2016-1248vim: Lack of validation of values for few options results in code exection
  16. CVE-2016-1247nginx: Local privilege escalation via log files
  17. CVE-2016-1246perl-DBD-MySQL: Buffer overflow triggered by user supplied data
  18. CVE-2016-1245quagga: Buffer Overflow in IPv6 RA handling
  19. CVE-2016-1240tomcat: unsafe chown of catalina.log in tomcat init script allows privilege escalation
  20. CVE-2016-1238perl: loading of modules from current directory
  21. CVE-2016-1237kernel: Missing check for permissions when setting ACL
  22. CVE-2016-1234glibc: Stack-based buffer overflow in glob with GLOB_ALTDIRFUNC and crafted directory
  23. CVE-2016-1233fuse: udev rule creates world-writeable /dev/cuse
  24. CVE-2016-0823kernel: Leakage of physical address mappings to non-privileged userspace
  25. CVE-2016-0821kernel: Too big poison pointer space
  26. CVE-2016-0800SSL/TLS: Cross-protocol attack on TLS using SSLv2 (DROWN)
  27. CVE-2016-0799OpenSSL: Fix memory issues in BIO_*printf functions
  28. CVE-2016-0798OpenSSL: Avoid memory leak in SRP
  29. CVE-2016-0797OpenSSL: BN_hex2bn/BN_dec2bn NULL pointer deref/heap corruption
  30. CVE-2016-0795libreoffice: Multiple out-of-bounds overflows in lwp filter
  31. CVE-2016-0794libreoffice: Multiple out-of-bounds overflows in lwp filter
  32. CVE-2016-0787libssh2: bits/bytes confusion resulting in truncated Diffie-Hellman secret length
  33. CVE-2016-0778OpenSSH: Client buffer-overflow when using roaming connections
  34. CVE-2016-0777OpenSSH: Client Information leak due to use of roaming connection feature
  35. CVE-2016-0775python-pillow: Buffer overflow in FliDecode.c
  36. CVE-2016-0774kernel: pipe buffer state corruption after unsuccessful atomic read from pipe
  37. CVE-2016-0773postgresql: case insensitive range handling integer overflow leading to buffer overflow
  38. CVE-2016-0772python: smtplib StartTLS stripping attack
  39. CVE-2016-0771samba: Out-of-bounds read in internal DNS server
  40. CVE-2016-0764NetworkManager: Race condition allowing info leak
  41. CVE-2016-0763tomcat: security manager bypass via setGlobalContext()
  42. CVE-2016-0762tomcat: timing attack in Realm implementation
  43. CVE-2016-0758kernel: tags with indefinite length can corrupt pointers in asn1_find_indefinite_length()
  44. CVE-2016-0755curl: NTLM credentials not-checked for proxy connection re-use
  45. CVE-2016-0749spice: heap-based memory corruption within smartcard handling
  46. CVE-2016-0741389-ds-base: worker threads do not detect abnormally closed connections causing DoS
  47. CVE-2016-0740python-pillow: Integer overflow resulting in buffer overflow when reading invalid tiff file
  48. CVE-2016-0736httpd: Padding Oracle in Apache mod_session_crypto
  49. CVE-2016-0729xerces-c: parser crashes on malformed input
  50. CVE-2016-0728kernel: Possible use-after-free vulnerability in keyring facility
CVE 2016 document archive — Page 30 | PulseLinux