Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 615

Export CSV
CVE-2016-4581

kernel: Slave being first propagated copy causes oops in propagate_mnt

fs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree in a certain case involving a slave mount, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted series of mount system calls.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Oracle and 1 more
Products
Ubuntu Linux Linux Kernel Linux and 2 more
CVE-2016-4805

kernel: Use after free vulnerability in ppp_unregister_channel

Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service (memory corruption and system crash, or spinlock) or possibly have unspecified other impact by removing a network namespace, related to the ppp_register_net_channel and ppp_unregister_channel functions.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Novell and 2 more
Products
Ubuntu Linux Linux Kernel Opensuse Leap and 9 more
CVE-2016-4809

libarchive: Memory allocate error with symbolic links in cpio archives

The archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a CPIO archive with a large symlink.

CVSS 3.0 · 7.5 High EPSS 4.8% KEV · Not listed
Vendors
Libarchive Oracle Redhat
Products
Libarchive Linux Enterprise Linux and 7 more
CVE-2016-4913

kernel: Information leak when handling NM entries containing NUL

The get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5 mishandles NM (aka alternate name) entries containing \0 characters, which allows local users to obtain sensitive information from kernel memory or possibly have unspecified other impact via a crafted isofs filesystem.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Novell and 2 more
Products
Ubuntu Linux Linux Kernel Suse Linux Enterprise Debuginfo and 5 more
CVE-2016-4951

kernel: Null pointer dereference in tipc_nl_publ_dump

The tipc_nl_publ_dump function in net/tipc/socket.c in the Linux kernel through 4.6 does not verify socket existence, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a dumpit operation.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Linux Oracle
Products
Ubuntu Linux Linux Kernel Linux
CVE-2016-4953

ntp: bad authentication demobilizes ephemeral associations

ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect authentication data at a certain time.

CVSS 3.1 · 7.5 High EPSS 17.2% KEV · Not listed
Vendors
Ntp Opensuse Oracle and 2 more
Products
Ntp Leap Opensuse and 12 more
CVE-2016-4954

ntp: partial processing of spoofed packets

The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication.

CVSS 3.1 · 7.5 High EPSS 13.3% KEV · Not listed
Vendors
Ntp Opensuse Oracle and 2 more
Products
Ntp Leap Opensuse and 12 more
CVE-2016-4955

ntp: autokey association reset

ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoofed crypto-NAK packet or (2) a packet with an incorrect MAC value at a certain time.

CVSS 3.1 · 5.9 Medium EPSS 8.8% KEV · Not listed
Vendors
Novell Ntp Opensuse and 3 more
Products
Suse Manager Ntp Leap and 8 more
CVE-2016-4956

ntp: broadcast interleave (incomplete fix for CVE-2016-1548)

ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-1548.

CVSS 3.1 · 5.3 Medium EPSS 16.4% KEV · Not listed
Vendors
Novell Ntp Opensuse and 3 more
Products
Suse Manager Ntp Leap and 8 more
CVE-2016-4957

ntp: crypto-NAK DoS (incorrect fix for CVE-2016-1547)

ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet. NOTE: this vulnerability exists because of an incorrect fix for CVE-2016-1547.

CVSS 3.1 · 7.5 High EPSS 44.9% KEV · Not listed
Vendors
Novell Ntp Opensuse and 2 more
Products
Suse Manager Ntp Leap and 6 more
CVE-2016-4997

kernel: compat IPT_SO_SET_REPLACE setsockopt

The compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter subsystem in the Linux kernel before 4.6.3 allow local users to gain privileges or cause a denial of service (memory corruption) by leveraging in-container root access to provide a crafted offset value that triggers an unintended decrement.

CVSS 3.1 · 7.8 High EPSS 5.7% KEV · Not listed
Vendors
Canonical Debian Linux and 3 more
Products
Ubuntu Linux Debian Linux Linux Kernel and 11 more
CVE-2016-4998

kernel: out of bounds reads when processing IPT_SO_SET_REPLACE setsockopt

The IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel before 4.6 allows local users to cause a denial of service (out-of-bounds read) or possibly obtain sensitive information from kernel heap memory by leveraging in-container root access to provide a crafted offset value that leads to crossing a ruleset blob boundary.

CVSS 3.0 · 7.1 High EPSS 1.9% KEV · Not listed
Vendors
Canonical Linux Oracle and 1 more
Products
Ubuntu Linux Linux Kernel Linux and 3 more
CVE-2016-5126

Qemu: block: iscsi: buffer overflow in iscsi_aio_ioctl

Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Canonical Debian Oracle and 2 more
Products
Ubuntu Linux Debian Linux Linux and 10 more
CVE-2016-5252

Mozilla: Stack underflow during 2D graphics rendering (MFSA 2016-67)

Stack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via crafted two-dimensional graphics data that is mishandled during clipping-region calculations.

CVSS 3.0 · 8.8 High EPSS 3.1% KEV · Not listed
Vendors
Mozilla Oracle Redhat
Products
Firefox Linux Enterprise Linux
CVE-2016-5254

Mozilla: Use-after-free when using alt key and toplevel menus (MFSA 2016-70)

Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows attackers to execute arbitrary code or cause a denial of service (heap memory corruption and application crash) by leveraging keyboard access to use the Alt key during selection of top-level menu items.

CVSS 3.0 · 9.8 Critical EPSS 3.0% KEV · Not listed
Vendors
Mozilla Oracle Redhat
Products
Firefox Linux Enterprise Linux
CVE-2016-5258

Mozilla: Use-after-free in DTLS during WebRTC session shutdown (MFSA 2016-72)

Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code by leveraging incorrect free operations on DTLS objects during the shutdown of a WebRTC session.

CVSS 3.0 · 8.8 High EPSS 3.3% KEV · Not listed
Vendors
Mozilla Oracle Redhat
Products
Firefox Linux Enterprise Linux
CVE-2016-5259

Mozilla: Use-after-free in service workers with nested sync events (MFSA 2016-73)

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via a script that closes its own Service Worker within a nested sync event loop.

CVSS 3.0 · 8.8 High EPSS 3.3% KEV · Not listed
Vendors
Mozilla Oracle Redhat
Products
Firefox Linux Enterprise Linux
CVE-2016-5262

Mozilla: Scripts on marquee tag can execute in sandboxed iframes (MFSA 2016-76)

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox="allow-scripts" attribute value, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.

CVSS 3.0 · 6.1 Medium EPSS 1.5% KEV · Not listed
Vendors
Mozilla Oracle Redhat
Products
Firefox Linux Enterprise Linux
CVE-2016-5263

Mozilla: Type confusion in display transformation (MFSA 2016-78)

The nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 mishandles rendering display transformation, which allows remote attackers to execute arbitrary code via a crafted web site that leverages "type confusion."

CVSS 3.0 · 8.8 High EPSS 2.3% KEV · Not listed
Vendors
Mozilla Oracle Redhat
Products
Firefox Linux Enterprise Linux