CVE 2016 document archive · 6
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,572 documents · Identifier year 2016 · 6 / 32
- CVE-2016-9532libtiff: Multiple uint32 overflows leading to heap buffer over-read
- CVE-2016-9480libdwarf: Heap buffer overflow in dwarf_util.c
- CVE-2016-9453libtiff: Out-of-bounds access in t2p_readwrite_pdf_image_tile()
- CVE-2016-9448libtiff: Null pointer dereference in TIFFFetchNormalTag() (regression of CVE-2016-9297)
- CVE-2016-9447gstreamer-plugins-bad-free: Memory corruption flaw in NSF decoder
- CVE-2016-9446gstreamer-plugins-bad-free: Missing initialization of allocated heap memory leads to information leak
- CVE-2016-9445gstreamer-plugins-bad-free: Integer overflow when allocating render buffer in VMnc decoder
- CVE-2016-9444bind: assertion failure while handling an unusually-formed DS record response
- CVE-2016-9427gc: Integer overflow in GC_MALLOC_ATOMIC
- CVE-2016-9401bash: popd controlled free
- CVE-2016-9399jasper: reachable assertion in calcstepsizes()
- CVE-2016-9398jasper: reachable assertion in jpc_floorlog2()
- CVE-2016-9397jasper: reachable assertion in jpc_dequantize()
- CVE-2016-9396jasper: reachable assertion in JPC_NOMINALGAIN()
- CVE-2016-9395jasper: reachable assertion failure in jas_seq2d_create()
- CVE-2016-9394jasper: insufficient SIZ marker segment data sanity checks
- CVE-2016-9393jasper: insufficient SIZ marker segment data sanity checks
- CVE-2016-9392jasper: insufficient SIZ marker segment data sanity checks
- CVE-2016-9391jasper: reachable assertions in the JPC bitstream code
- CVE-2016-9390jasper: insufficient SIZ marker tilexoff and tileyoff checks
- CVE-2016-9389jasper: reachable assertions caused by insufficient component domains checks in ICT/RCT in JPC codec
- CVE-2016-9388jasper: reachable assertions in RAS encoder/decoder
- CVE-2016-9387jasper: integer overflow in jpc_dec_process_siz()
- CVE-2016-9381xen: qemu incautious about shared ring processing (XSA-197)
- CVE-2016-9376wireshark: OpenFlow crash (wnpa-sec-2016-60)
- CVE-2016-9375wireshark: DTN infinite loop (wnpa-sec-2016-62)
- CVE-2016-9374wireshark: AllJoyn crash (wnpa-sec-2016-59)
- CVE-2016-9373wireshark: DCERPC crash (wnpa-sec-2016-61)
- CVE-2016-9372wireshark: Profinet I/O dissector long loop (wnpa-sec-2016-58)
- CVE-2016-9318libxml2: XML External Entity vulnerability
- CVE-2016-9317gd: Missing check for oversized images in gdImageCreate()
- CVE-2016-9313kernel: security/keys/big_key.c mishandles unsuccessful crypto registration
- CVE-2016-9312ntp: DoS by oversized UDP packet
- CVE-2016-9311ntp: Null pointer dereference when trap service is enabled
- CVE-2016-9310ntp: Mode 6 unauthenticated trap information disclosure and DDoS vector
- CVE-2016-9298ImageMagick: Heap buffer overflow in WaveletDenoiseImage()
- CVE-2016-9297libtiff: Out-of-bounds heap read in _TIFFPrintField (tif_print.c:127)
- CVE-2016-9279kernel: Use After Free in /dev/fimg2d
- CVE-2016-9278kernel: Kernel Crash on /dev/fimg2d ioctl command
- CVE-2016-9276libdwarf: Out-of-bounds heap read in dwarf_get_aranges_list
- CVE-2016-9275libdwarf: Out of bound heap read in _dwarf_skim_forms
- CVE-2016-9273libtiff: Out-of-bounds heap read in cpStrips
- CVE-2016-9262jasper: integer truncation in jas_image_cmpt_create()
- CVE-2016-9243python-cryptography: HKDF might return an empty byte-string
- CVE-2016-9191kernel: Local DoS via cgroup offline code
- CVE-2016-9190python-pillow: Missing check for negative image dimensions in ImagingNew (Storage.c)
- CVE-2016-9189python-pillow: Integer overflows leading to memory disclosure in PyImaging_MapBuffer (Map.c)
- CVE-2016-9181perl-Image-Info: XXE in SVG files
- CVE-2016-9180perl-XML-Twig: expand_external_ents option fails to work as documented
- CVE-2016-9179lynx: Invalid URL parsing of pages containing '?'