CVE 2016 document archive · 9
Official-source documents for RHEL 7/8/9. Full search and filters remain available in the search interface. CVE entries require collected VEX data. Search & filters →
1,572 documents · Identifier year 2016 · 9 / 32
- CVE-2016-8616curl: Case insensitive password comparison
- CVE-2016-8615curl: Cookie injection for other servers
- CVE-2016-8610SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS
- CVE-2016-8606guile: REPL server vulnerable to HTTP inter-protocol attacks
- CVE-2016-8605guile: Thread-unsafe umask modification
- CVE-2016-8602ghostscript: check for sufficient params in .sethalftone5
- CVE-2016-8578Qemu: 9pfs: potential NULL dereferencein 9pfs routines
- CVE-2016-8577Qemu: 9pfs: host memory leakage in v9fs_read
- CVE-2016-8576Qemu: usb: xHCI: infinite loop vulnerability in xhci_ring_fetch
- CVE-2016-8575tcpdump: multiple overflow issues in protocol decoding
- CVE-2016-8574tcpdump: multiple overflow issues in protocol decoding
- CVE-2016-8405kernel: Copying color maps to userspace vulnerable to heap-buffer overflow
- CVE-2016-8399kernel: net: Out of bounds stack read in memcpy_fromiovec
- CVE-2016-8332openjpeg2: JPEG2000 mcc record Code Execution Vulnerability
- CVE-2016-8331libtiff: FAX IFD Entry Parsing Type Confusion
- CVE-2016-8327mysql: Server: Replication unspecified vulnerability (CPU Jan 2017)
- CVE-2016-8318mysql: Server: Security: Encryption unspecified vulnerability (CPU Jan 2017)
- CVE-2016-8290mysql: unspecified vulnerability in subcomponent: Server: Performance Schema (CPU October 2016)
- CVE-2016-8289mysql: unspecified vulnerability in subcomponent: Server: InnoDB (CPU October 2016)
- CVE-2016-8288mysql: unspecified vulnerability in subcomponent: Server: InnoDB Plugin (CPU October 2016)
- CVE-2016-8287mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU October 2016)
- CVE-2016-8286mysql: unspecified vulnerability in subcomponent: Server: Security: Privileges (CPU October 2016)
- CVE-2016-8284mysql: unspecified vulnerability in subcomponent: Server: Replication (CPU October 2016)
- CVE-2016-8283mysql: unspecified vulnerability in subcomponent: Server: Types (CPU October 2016)
- CVE-2016-8106kernel: DoS of Intel Ethernet controllers after a period of IPv6 fragment flood
- CVE-2016-7995Qemu: usb: hcd-ehci: memory leak in ehci_process_itd
- CVE-2016-7994Qemu: virtio-gpu: memory leak in virtio_gpu_resource_create_2d
- CVE-2016-7993tcpdump: multiple overflow issues in protocol decoding
- CVE-2016-7992tcpdump: multiple overflow issues in protocol decoding
- CVE-2016-7986tcpdump: multiple overflow issues in protocol decoding
- CVE-2016-7985tcpdump: multiple overflow issues in protocol decoding
- CVE-2016-7984tcpdump: multiple overflow issues in protocol decoding
- CVE-2016-7983tcpdump: multiple overflow issues in protocol decoding
- CVE-2016-7979ghostscript: Type confusion in .initialize_dsc_parser allows remote code execution
- CVE-2016-7978ghostscript: reference leak in .setdevice allows use-after-free and remote code execution
- CVE-2016-7977ghostscript: .libfile does not honor -dSAFER
- CVE-2016-7976ghostscript: various userparams allow %pipe% in paths, allowing remote shell
- CVE-2016-7975tcpdump: multiple overflow issues in protocol decoding
- CVE-2016-7974tcpdump: multiple overflow issues in protocol decoding
- CVE-2016-7973tcpdump: multiple overflow issues in protocol decoding
- CVE-2016-7968kdepim: JavaScript execution in HTML Mails
- CVE-2016-7967kdepim: JavaScript access to local and remote URLs in Kmail
- CVE-2016-7966kdepim: HTML injection in plain text viewer of KMail
- CVE-2016-7958wireshark: NCP dissector crash
- CVE-2016-7957wireshark: Bluetooth L2CAP dissector crash
- CVE-2016-7954rubygem-bundler: Code execution via gem name collision in bundler
- CVE-2016-7953libXvMC: Insufficient validation of server responses results in buffer underflow
- CVE-2016-7952libXtst: Insufficient validation of server responses result in various data mishandlings
- CVE-2016-7951libXtst: Insufficient validation of server responses result in Integer overflows
- CVE-2016-7950libXrender: Insufficient validation of server responses results out-of-bounds write in XRenderQueryFilters