CVE-2016-9131

bind: assertion failure while processing response to an ANY query

named in ISC BIND 9.x before 9.9.9-P5, 9.10.x before 9.10.4-P5, and 9.11.x before 9.11.0-P2 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed response to an RTYPE ANY query.

CVSS 3.1 · 7.5 High EPSS 40.6% KEV · Not listed

Vendors

Debian Isc Netapp and 1 more

Products

Debian Linux Bind Data Ontap Edge and 11 more

CVE-2016-8743

httpd: Apache HTTP Request Parsing Whitespace Defects

Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests and sent in response lines and headers. Accepting these different behaviors represented a security concern when httpd participates in any chain of proxies or interacts with back-end application servers, either through mod_proxy or using conventional CGI mechanisms, and may result in request smuggling, response splitting and cache pollution.

CVSS 3.1 · 7.5 High EPSS 13.3% KEV · Not listed

Vendors

Apache Debian Netapp and 1 more

Products

Http Server Debian Linux Clustered Data Ontap and 10 more

CVE-2016-5011

util-linux: Extended partition loop in MBR partition table leads to DOS

The parse_dos_extended function in partitions/dos.c in the libblkid library in util-linux allows physically proximate attackers to cause a denial of service (memory consumption) via a crafted MSDOS partition table with an extended partition boot record at zero offset.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed

Vendors

Ibm Kernel Redhat

Products

Power Hardware Management Console Powerkvm Util-linux and 7 more

CVE-2015-8896

ImageMagick: Integer truncation vulnerability in coders/pict.c

Integer truncation issue in coders/pict.c in ImageMagick before 7.0.5-0 allows remote attackers to cause a denial of service (application crash) via a crafted .pict file.

CVSS 3.1 · 6.5 Medium EPSS 2.9% KEV · Not listed

Vendors

Imagemagick Oracle Redhat

Products

Imagemagick Linux Enterprise Linux and 6 more

CVE-2014-0384

mysql: unspecified DoS related to XML (CPU April 2014)

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to XML.

CVSS 2.0 · 4.0 Medium EPSS 3.3% KEV · Not listed

Vendors

Mariadb Oracle Redhat

Products

Mariadb Mysql Enterprise Linux and 7 more

CVE-2014-0101

kernel: net: sctp: null pointer dereference when processing authenticated cookie_echo chunk

The sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.13.6 does not validate certain auth_enable and auth_capable fields before making an sctp_sf_authenticate call, which allows remote attackers to cause a denial of service (NULL pointer dereference and system crash) via an SCTP handshake with a modified INIT chunk and a crafted AUTH chunk before a COOKIE_ECHO chunk.

CVSS 2.0 · 7.8 High EPSS 7.2% KEV · Not listed

Vendors

Canonical F5 Linux and 1 more

Products

Ubuntu Linux Big-ip Access Policy Manager Big-ip Advanced Firewall Manager and 27 more

CVE-2014-0069

kernel: cifs: incorrect handling of bogus user pointers during uncached writes

The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that copy fewer than the requested number of bytes, which allows local users to obtain sensitive information from kernel memory, cause a denial of service (memory corruption and system crash), or possibly gain privileges via a writev system call with a crafted pointer.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Linux Redhat Suse

Products

Linux Kernel Enterprise Linux Enterprise Linux Desktop and 8 more

CVE-2013-5704

httpd: bypass of mod_headers rules via chunked requests

The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding. NOTE: the vendor states "this is not a security issue in httpd as such."

CVSS 2.0 · 5.0 Medium EPSS 58.0% KEV · Not listed

Vendors

Apache Apple Canonical and 2 more

Products

Http Server Mac Os X Mac Os X Server and 14 more

CVE-2016-8864

bind: assertion failure while handling responses containing a DNAME answer

named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer section of a response to a recursive query, related to db.c and resolver.c.

CVSS 3.1 · 7.5 High EPSS 38.7% KEV · Not listed

Vendors

Debian Isc Netapp and 1 more

Products

Debian Linux Bind Data Ontap Edge and 13 more

CVE-2016-7163

openjpeg: Integer overflow in opj_pi_create_decode

Integer overflow in the opj_pi_create_decode function in pi.c in OpenJPEG allows remote attackers to execute arbitrary code via a crafted JP2 file, which triggers an out-of-bounds read or write.

CVSS 3.1 · 7.8 High EPSS 7.1% KEV · Not listed

Vendors

Debian Fedoraproject Redhat and 1 more

Products

Debian Linux Fedora Enterprise Linux and 7 more

CVE-2016-5629

mysql: unspecified vulnerability in subcomponent: Server: Federated (CPU October 2016)

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote administrators to affect availability via vectors related to Server: Federated.

CVSS 3.1 · 4.9 Medium EPSS 3.3% KEV · Not listed

Vendors

Mariadb Oracle Redhat

Products

Mariadb Mysql Enterprise Linux and 7 more

CVE-2016-5626

mysql: unspecified vulnerability in subcomponent: Server: GIS (CPU October 2016)

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS.

CVSS 3.1 · 6.5 Medium EPSS 6.3% KEV · Not listed

Vendors

Mariadb Oracle Redhat

Products

Mariadb Mysql Enterprise Linux and 5 more

CVE-2016-5624

mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016)

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier allows remote authenticated users to affect availability via vectors related to DML.

CVSS 3.1 · 6.5 Medium EPSS 5.1% KEV · Not listed

Vendors

Mariadb Oracle Redhat

Products

Mariadb Mysql Enterprise Linux and 7 more

CVE-2016-5612

mysql: unspecified vulnerability in subcomponent: Server: DML (CPU October 2016)

Unspecified vulnerability in Oracle MySQL 5.5.50 and earlier, 5.6.31 and earlier, and 5.7.13 and earlier allows remote authenticated users to affect availability via vectors related to DML.

CVSS 3.1 · 6.5 Medium EPSS 3.7% KEV · Not listed

Vendors

Mariadb Oracle Redhat

Products

Mariadb Mysql Enterprise Linux and 7 more

CVE-2016-5387

HTTPD: sets environmental variable based on user supplied Proxy request header

The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue. NOTE: the vendor states "This mitigation has been assigned the identifier CVE-2016-5387"; in other words, this is not a CVE ID for a vulnerability.

CVSS 3.1 · 8.1 High EPSS 55.7% KEV · Not listed

Vendors

Apache Canonical Debian and 5 more

Products

Http Server Ubuntu Linux Debian Linux and 19 more

CVE-2016-5126

Qemu: block: iscsi: buffer overflow in iscsi_aio_ioctl

Heap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local guest OS users to cause a denial of service (QEMU process crash) or possibly execute arbitrary code via a crafted iSCSI asynchronous I/O ioctl call.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Oracle and 2 more

Products

Ubuntu Linux Debian Linux Linux and 10 more

CVE-2016-4020

Qemu: i386: leakage of stack memory to guest in kvmvapic.c

The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register (TPR).

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Qemu and 1 more

Products

Ubuntu Linux Debian Linux Qemu and 9 more

CVE-2016-3492

mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU October 2016)

Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Optimizer.

CVSS 3.1 · 6.5 Medium EPSS 6.8% KEV · Not listed

Vendors

Mariadb Oracle Redhat

Products

Mariadb Mysql Enterprise Linux and 7 more

CVE-2016-2857

Qemu: net: out of bounds read in net_checksum_calculate()

The net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to cause a denial of service (out-of-bounds heap read and crash) via the payload length in a crafted packet.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Qemu and 1 more

Products

Ubuntu Linux Debian Linux Qemu and 9 more

CVE-2016-2775

bind: Too long query name causes segmentation fault in lwresd

ISC BIND 9.x before 9.9.9-P2, 9.10.x before 9.10.4-P2, and 9.11.x before 9.11.0b2, when lwresd or the named lwres option is enabled, allows remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol.

CVSS 3.1 · 5.9 Medium EPSS 63.3% KEV · Not listed

Vendors

Fedoraproject Hp Isc and 1 more

Products

Fedora Hp-ux Bind and 8 more