CVE-2016-0505

mysql: unspecified vulnerability in subcomponent: Server: Options (CPU January 2016)

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Options.

CVSS 2.0 · 6.8 Medium EPSS 7.5% KEV · Not listed

Vendors

Canonical Debian Mariadb and 3 more

Products

Ubuntu Linux Debian Linux Mariadb and 14 more

CVE-2016-0595

mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)

Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier allows remote authenticated users to affect availability via vectors related to DML.

CVSS 2.0 · 4.0 Medium EPSS 2.8% KEV · Not listed

Vendors

Canonical Opensuse Oracle and 1 more

Products

Ubuntu Linux Leap Opensuse and 3 more

CVE-2016-0503

mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)

Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2016-0504.

CVSS 2.0 · 4.0 Medium EPSS 2.8% KEV · Not listed

Vendors

Canonical Opensuse Oracle and 1 more

Products

Ubuntu Linux Leap Opensuse and 3 more

CVE-2016-0504

mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)

Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via vectors related to DML, a different vulnerability than CVE-2016-0503.

CVSS 2.0 · 6.8 Medium EPSS 3.2% KEV · Not listed

Vendors

Canonical Opensuse Oracle and 1 more

Products

Ubuntu Linux Leap Opensuse and 3 more

CVE-2016-0596

mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and 5.6.27 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to DML.

CVSS 2.0 · 4.0 Medium EPSS 4.3% KEV · Not listed

Vendors

Canonical Debian Mariadb and 3 more

Products

Ubuntu Linux Debian Linux Mariadb and 14 more

CVE-2016-0597

mysql: unspecified vulnerability in subcomponent: Server: Optimizer (CPU January 2016)

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

CVSS 2.0 · 4.0 Medium EPSS 4.3% KEV · Not listed

Vendors

Canonical Debian Mariadb and 3 more

Products

Ubuntu Linux Debian Linux Mariadb and 14 more

CVE-2015-8933

libarchive: Undefined behavior / signed integer overflow in TAR parser

Integer overflow in the archive_read_format_tar_skip function in archive_read_support_format_tar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file.

CVSS 3.0 · 5.5 Medium EPSS 2.1% KEV · Not listed

Vendors

Canonical Libarchive Suse

Products

Ubuntu Linux Libarchive Linux Enterprise Desktop and 2 more

CVE-2015-8934

libarchive: out of bounds heap read in RAR parser

The copy_from_lzss_window function in archive_read_support_format_rar.c in libarchive 3.2.0 and earlier allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted rar file.

CVSS 3.0 · 5.5 Medium EPSS 2.3% KEV · Not listed

Vendors

Canonical Libarchive Redhat and 1 more

Products

Ubuntu Linux Libarchive Enterprise Linux and 3 more

CVE-2015-8931

libarchive: Undefined behavior (signed integer overflow) in mtree parser

Multiple integer overflows in the (1) get_time_t_max and (2) get_time_t_min functions in archive_read_support_format_mtree.c in libarchive before 3.2.0 allow remote attackers to have unspecified impact via a crafted mtree file, which triggers undefined behavior.

CVSS 3.0 · 7.8 High EPSS 2.1% KEV · Not listed

Vendors

Canonical Debian Libarchive and 2 more

Products

Ubuntu Linux Debian Linux Libarchive and 4 more

CVE-2015-8932

libarchive: Undefined behavior / invalid shiftleft in TAR parser

The compress_bidder_init function in archive_read_support_filter_compress.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted tar file, which triggers an invalid left shift.

CVSS 3.0 · 5.5 Medium EPSS 2.2% KEV · Not listed

Vendors

Canonical Debian Libarchive and 2 more

Products

Ubuntu Linux Debian Linux Libarchive and 4 more

CVE-2015-8946

ecryptfs-utils: ecryptfs-setup-swap improperly configures encrypted swap when using GPT partitioning

ecryptfs-setup-swap in eCryptfs before 111 does not prevent the unencrypted swap partition from activating during boot when using GPT partitioning and certain versions of systemd, which allows local users to obtain sensitive information via unspecified vectors.

CVSS 3.0 · 3.3 Low EPSS < 1% KEV · Not listed

Vendors

Canonical Ecryptfs

Products

Ubuntu Linux Ecryptfs-utils

CVE-2015-8926

libarchive: NULL pointer access in RAR parser

The archive_read_format_rar_read_data function in archive_read_support_format_rar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (crash) via a crafted rar archive.

CVSS 3.0 · 5.5 Medium EPSS 2.0% KEV · Not listed

Vendors

Canonical Libarchive Redhat and 1 more

Products

Ubuntu Linux Libarchive Enterprise Linux and 3 more

CVE-2015-8928

libarchive: Heap out of bounds read in mtree parser

The process_add_entry function in archive_read_support_format_mtree.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted mtree file.

CVSS 3.0 · 5.5 Medium EPSS 2.1% KEV · Not listed

Vendors

Canonical Libarchive Redhat and 1 more

Products

Ubuntu Linux Libarchive Enterprise Linux and 3 more

CVE-2014-8159

kernel: infiniband: uverbs: unprotected physical memory access

The InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly restrict use of User Verbs for registration of memory regions, which allows local users to access arbitrary physical memory locations, and consequently cause a denial of service (system crash) or gain privileges, by leveraging permissions on a uverbs device under /dev/infiniband/.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Linux and 1 more

Products

Ubuntu Linux Debian Linux Linux Kernel and 6 more

CVE-2014-8501

binutils: out-of-bounds write when parsing specially crafted PE executable

The _bfd_XXi_swap_aouthdr_in function in bfd/peXXigen.c in GNU binutils 2.24 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) and possibly have other unspecified impact via a crafted NumberOfRvaAndSizes field in the AOUT header in a PE executable.

CVSS 2.0 · 7.5 High EPSS 5.2% KEV · Not listed

Vendors

Canonical Fedoraproject Gnu and 1 more

Products

Ubuntu Linux Fedora Binutils and 1 more

CVE-2015-8930

libarchive: Endless loop in ISO parser

bsdtar in libarchive before 3.2.0 allows remote attackers to cause a denial of service (infinite loop) via an ISO with a directory that is a member of itself.

CVSS 3.0 · 7.5 High EPSS 4.3% KEV · Not listed

Vendors

Canonical Libarchive Redhat and 1 more

Products

Ubuntu Linux Libarchive Enterprise Linux and 3 more

CVE-2015-8948

libidn: Out-of-bounds read due to use of fgets with fixed-size buffer

idn in GNU libidn before 1.33 might allow remote attackers to obtain sensitive memory information by reading a zero byte as input, which triggers an out-of-bounds read.

CVSS 3.0 · 7.5 High EPSS 6.8% KEV · Not listed

Vendors

Canonical Gnu Opensuse

Products

Ubuntu Linux Libidn Leap and 1 more

CVE-2016-0598

mysql: unspecified vulnerability in subcomponent: Server: DML (CPU January 2016)

Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to DML.

CVSS 2.0 · 3.5 Low EPSS 3.9% KEV · Not listed

Vendors

Canonical Debian Mariadb and 3 more

Products

Ubuntu Linux Debian Linux Mariadb and 14 more

CVE-2016-0758

kernel: tags with indefinite length can corrupt pointers in asn1_find_indefinite_length()

Integer overflow in lib/asn1_decoder.c in the Linux kernel before 4.6 allows local users to gain privileges via crafted ASN.1 data.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Canonical Linux Redhat

Products

Ubuntu Linux Linux Kernel Enterprise Linux and 9 more

CVE-2014-8150

curl: URL request injection vulnerability in parseurlandfillconn()

CRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in a URL.

CVSS 2.0 · 4.3 Medium EPSS 6.8% KEV · Not listed

Vendors

Canonical Debian Haxx and 1 more

Products

Ubuntu Linux Debian Linux Libcurl and 1 more