CVE 2016 document archive · 8
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,572 documents · Identifier year 2016 · 8 / 32
- CVE-2016-8745tomcat: information disclosure due to incorrect Processor sharing
- CVE-2016-8743httpd: Apache HTTP Request Parsing Whitespace Defects
- CVE-2016-8740httpd: Incomplete handling of LimitRequestFields directive in mod_http2
- CVE-2016-8735tomcat: Remote code execution vulnerability in JmxRemoteLifecycleListener
- CVE-2016-8734subversion: unrestricted XML entity expansion in mod_dontdothat and Subversion clients using http(s)://
- CVE-2016-8707ImageMagick: OOB write in convert utility when deflating TIFF files
- CVE-2016-8706memcached: SASL authentication remote code execution
- CVE-2016-8705memcached: Server update remote code execution
- CVE-2016-8704memcached: Server append/prepend remote code execution
- CVE-2016-8693jasper: incorrect handling of bufsize 0 in mem_resize()
- CVE-2016-8692jasper: missing SIZ marker segment XRsiz and YRsiz fields range check
- CVE-2016-8691jasper: missing SIZ marker segment XRsiz and YRsiz fields range check
- CVE-2016-8690jasper: missing jas_matrix_create() parameter checks
- CVE-2016-8689libarchive: heap based buffer overflow in read_header (archive_read_support_format_7zip.c)
- CVE-2016-8688libarchive: heap based buffer overflow in detect_form (archive_read_support_format_mtree.c)
- CVE-2016-8687libarchive: stack based buffer overflow in bsdtar_expand_char (util.c)
- CVE-2016-8681libdwarf: Heap based buffer overflow in _dwarf_get_abbrev_for_code
- CVE-2016-8680libdwarf: Out of bounds heap read in _dwarf_get_abbrev_for_code
- CVE-2016-8679libdwarf: Heap based buffer overflow in _dwarf_get_size_of_val
- CVE-2016-8678ImageMagick: Heap-buffer overflow in IsPixelMonochrome
- CVE-2016-8677ImageMagick: Memory allocation failure in AcquireQuantumPixels
- CVE-2016-8670php: Stack based buffer overflow in dynamicGetbuf
- CVE-2016-8669Qemu: char: divide by zero error in serial_update_parameters
- CVE-2016-8668Qemu: net: OOB buffer access in rocker switch emulation
- CVE-2016-8667Qemu: hw: dma: divide by zero error in set_next_tick
- CVE-2016-8666kernel: Remotely triggerable recursion in GRE code leading to kernel crash
- CVE-2016-8660kernel: xfs: local DoS due to a page lock order bug in the XFS seek hole/data implementation
- CVE-2016-8658kernel: Stack buffer overflow in brcmf_cfg80211_start_ap
- CVE-2016-8655kernel: Race condition in packet_set_ring leads to use after free
- CVE-2016-8654jasper: heap-based buffer overflow in QMFB code in JPC codec
- CVE-2016-8652dovecot: Remote crash when auth-policy component is activated
- CVE-2016-8650kernel: Null pointer dereference via keyctl
- CVE-2016-8646kernel: Oops in shash_async_export()
- CVE-2016-8645kernel: a BUG() statement can be hit in net/ipv4/tcp_input.c
- CVE-2016-8638ipsilon: DoS via logging out all open SAML2 sessions
- CVE-2016-8637dracut: Local information disclosure of initramfs when early cpio is used
- CVE-2016-8636kernel: Integer overflow in the RDMA over infiniband software implementation
- CVE-2016-8635nss: small-subgroups attack flaw
- CVE-2016-8633kernel: Buffer overflow in firewire driver via crafted incoming packets
- CVE-2016-8632kernel: TIPC subsystem: tipc_msg_build() doesn't validate MTU, may cause memory corruption.
- CVE-2016-8630kernel: kvm: x86: NULL pointer dereference during instruction decode
- CVE-2016-8625curl: IDNA 2003 makes curl use wrong host
- CVE-2016-8624curl: Invalid URL parsing with '#'
- CVE-2016-8623curl: Use-after-free via shared cookies
- CVE-2016-8622curl: URL unescape heap overflow via integer truncation
- CVE-2016-8621curl: curl_getdate out-of-bounds read
- CVE-2016-8620curl: Glob parser write/read out of bounds
- CVE-2016-8619curl: Double-free in krb5 code
- CVE-2016-8618curl: Double-free in curl_maprintf
- CVE-2016-8617curl: Out-of-bounds write via unchecked multiplication