PulseLinuxLINUX UPDATE INTELLIGENCE

CVE 2016 document archive · 7

Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →

1,572 documents · Identifier year 2016 · 7 / 32

  1. CVE-2016-9178kernel: Information leak in get_user_ex function
  2. CVE-2016-9147bind: assertion failure while handling a query response containing inconsistent DNSSEC information
  3. CVE-2016-9138php: Use after free in unserialize() via DateInterval::__wakeup()
  4. CVE-2016-9137php: Use after free in unserialize()
  5. CVE-2016-9131bind: assertion failure while processing response to an ANY query
  6. CVE-2016-9118openjpeg2: Multiple security issues
  7. CVE-2016-9117openjpeg2: Multiple security issues
  8. CVE-2016-9116openjpeg2: Multiple security issues
  9. CVE-2016-9115openjpeg2: Multiple security issues
  10. CVE-2016-9114openjpeg2: Multiple security issues
  11. CVE-2016-9113openjpeg2: Multiple security issues
  12. CVE-2016-9112openjpeg2: Floating point exception vulnerability in openjpeg2 when processing untrusted images
  13. CVE-2016-9106Qemu: 9pfs: memory leakage in v9fs_write
  14. CVE-2016-9105Qemu: 9pfs: memory leakage in v9fs_link
  15. CVE-2016-9104Qemu: 9pfs: integer overflow leading to OOB access
  16. CVE-2016-9103Qemu: 9pfs: information leakage via xattr
  17. CVE-2016-9102Qemu: 9pfs: memory leakage when creating extended attribute
  18. CVE-2016-9101Qemu: net: eepro100 memory leakage at device unplug
  19. CVE-2016-9085libwebp: Several integer overflows
  20. CVE-2016-9084kernel: Integer overflow when using kzalloc in vfio driver
  21. CVE-2016-9083kernel: State machine confusion bug in vfio driver leading to memory corruption
  22. CVE-2016-9082cairo: Out of bounds read in read_png/write_png in cairo-png.c
  23. CVE-2016-9079Mozilla: Firefox SVG Animation Remote Code Execution (MFSA 2016-92)
  24. CVE-2016-9077Mozilla: Canvas filters allow feDisplacementMaps to be applied to cross-origin images, allowing timing attacks on them (MFSA 2016-89)
  25. CVE-2016-9076firefox: select dropdown menu can be used for URL bar spoofing on e10s
  26. CVE-2016-9075Mozilla: WebExtensions can access the mozAddonManager API and use it to gain elevated privileges (MFSA 2016-89)
  27. CVE-2016-9074nss: Insufficient timing side-channel resistance in divSpoiler
  28. CVE-2016-9073firefox: windows.create schema doesn't specify "format": "relativeUrl"
  29. CVE-2016-9071Mozilla: Probe browser history via HSTS/301 redirect + CSP (MFSA 2016-89)
  30. CVE-2016-9070firefox: Sidebar bookmark can have reference to chrome window
  31. CVE-2016-9069firefox: Heap use-after-free in nsINode::ReplaceOrInsertBefore
  32. CVE-2016-9068firefox: Heap use-after-free in nsRefreshDriver
  33. CVE-2016-9067firefox: Heap use-after-free in nsINode::ReplaceOrInsertBefore
  34. CVE-2016-9066Mozilla: Integer overflow leading to a buffer overflow in nsScriptLoadHandler (MFSA 2016-89, MFSA 2016-90)
  35. CVE-2016-9064Mozilla: Addons update must verify IDs match between current and new versions (MFSA 2016-89, MFSA 2016-90)
  36. CVE-2016-9063firefox: Possible integer overflow to fix inside XML_Parse in Expat
  37. CVE-2016-9042ntp: DoS via origin timestamp check functionality
  38. CVE-2016-9011libwmf: Memory allocation failure in wmf_malloc
  39. CVE-2016-8910Qemu: net: rtl8139: infinite loop while transmit in C+ mode
  40. CVE-2016-8909Qemu: audio: intel-hda: infinite loop in processing dma buffer stream
  41. CVE-2016-8887jasper: uninitialized pointer use in jp2_box_get()
  42. CVE-2016-8886jasper: no upper limit on memory allocations in jas_malloc()
  43. CVE-2016-8885jasper: missing jas_matrix_create() parameter checks
  44. CVE-2016-8884jasper: missing jas_matrix_create() parameter checks
  45. CVE-2016-8883jasper: reachable asserts in jpc_dec_tiledecode()
  46. CVE-2016-8882jasper: uninitialized tile->pi pointer use in JPC decoder
  47. CVE-2016-8866ImageMagick: Memory allocation failure in AcquireMagickMemory (incomplete fix for CVE-2016-8862)
  48. CVE-2016-8864bind: assertion failure while handling responses containing a DNAME answer
  49. CVE-2016-8862ImageMagick: Memory allocation failure in AcquireMagickMemory
  50. CVE-2016-8858openssh: Memory exhaustion due to unregistered KEXINIT handler after receiving message
CVE 2016 document archive — Page 7 | PulseLinux