CVE-2016-2181

openssl: DTLS replay protection bypass allows DoS against DTLS connection

The Anti-Replay feature in the DTLS implementation in OpenSSL before 1.1.0 mishandles early use of a new epoch number in conjunction with a large sequence number, which allows remote attackers to cause a denial of service (false-positive packet drops) via spoofed DTLS records, related to rec_layer_d1.c and ssl3_record.c.

CVSS 3.0 · 7.5 High EPSS 22.6% KEV · Not listed

Vendors

Openssl Oracle Redhat

Products

Openssl Linux Enterprise Linux

CVE-2016-2182

openssl: Out-of-bounds write caused by unchecked errors in BN_bn2dec()

The BN_bn2dec function in crypto/bn/bn_print.c in OpenSSL before 1.1.0 does not properly validate division results, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.

CVSS 3.0 · 9.8 Critical EPSS 44.2% KEV · Not listed

Vendors

Hp Openssl Oracle and 1 more

Products

Icewall Federation Agent Icewall Mcrp Icewall Sso and 5 more

CVE-2016-2315

git: path_name() integer truncation and overflow leading to buffer overflow

revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, leading to a heap-based buffer overflow.

CVSS 3.1 · 9.8 Critical EPSS 17.3% KEV · Not listed

Vendors

Git-scm Opensuse Redhat and 1 more

Products

Git Leap Opensuse and 7 more

CVE-2016-2324

git: path_name() integer truncation and overflow leading to buffer overflow

Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer overflow.

CVSS 3.1 · 9.8 Critical EPSS 18.1% KEV · Not listed

Vendors

Git-scm Opensuse Redhat and 1 more

Products

Git Leap Opensuse and 7 more

CVE-2016-2384

kernel: double-free in usb-audio triggered by invalid USB descriptor

Double free vulnerability in the snd_usbmidi_create function in sound/usb/midi.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (panic) or possibly have unspecified other impact via vectors involving an invalid USB descriptor.

CVSS 3.0 · 4.6 Medium EPSS 3.7% KEV · Not listed

Vendors

Linux Novell Redhat

Products

Linux Kernel Suse Linux Enterprise Real Time Extension Enterprise Linux and 1 more

CVE-2016-2776

bind: assertion failure in buffer.c while building responses to a specifically constructed request

buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.

CVSS 3.0 · 7.5 High EPSS 89.5% KEV · Not listed

Vendors

Hp Isc Oracle and 1 more

Products

Hp-ux Bind Linux and 7 more

CVE-2016-2790

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 2.3% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-2791

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 2.3% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-2792

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2800.

CVSS 3.0 · 8.8 High EPSS 2.3% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-2793

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

CachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 2.7% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-2794

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 3.5% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-2795

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The graphite2::FileFace::get_table_fn function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, does not initialize memory for an unspecified data structure, which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 2.3% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-2796

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 3.9% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-2797

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2801.

CVSS 3.0 · 8.8 High EPSS 2.7% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-2798

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The graphite2::GlyphCache::Loader::Loader function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 2.3% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-2799

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

Heap-based buffer overflow in the graphite2::Slot::setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 4.9% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-2800

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2792.

CVSS 3.0 · 8.8 High EPSS 2.3% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-2801

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The graphite2::TtfUtil::CmapSubtable12Lookup function in TtfUtil.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font, a different vulnerability than CVE-2016-2797.

CVSS 3.0 · 8.8 High EPSS 2.3% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-2802

graphite2: multiple font parsing vulnerabilities (Mozilla MFSA 2016-37)

The graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service (buffer over-read) or possibly have unspecified other impact via a crafted Graphite smart font.

CVSS 3.0 · 8.8 High EPSS 2.3% KEV · Not listed

Vendors

Mozilla Opensuse Oracle and 3 more

Products

Firefox Leap Opensuse and 4 more

CVE-2016-2806

Mozilla: Miscellaneous memory safety hazards (rv:46.0 / rv:45.1) (MFSA 2016-39)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 46.0 and Firefox ESR 45.x before 45.1 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

CVSS 3.0 · 8.8 High EPSS 4.7% KEV · Not listed

Vendors

Debian Mozilla Opensuse and 2 more

Products

Debian Linux Firefox Leap and 3 more