CVE-2016-6515

openssh: Denial of service via very long passwords

The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which allows remote attackers to cause a denial of service (crypt CPU consumption) via a long string.

CVSS 3.0 · 7.5 High EPSS 58.6% KEV · Not listed

Vendors

Fedoraproject Openbsd Redhat

Products

Fedora Openssh Enterprise Linux

CVE-2014-7155

kernel: xen: Missing privilege level checks in x86 HLT, LGDT, LIDT, and LMSW emulation (XSA-105)

The x86_emulate function in arch/x86/x86_emulate/x86_emulate.c in Xen 4.4.x and earlier does not properly check supervisor mode permissions, which allows local HVM users to cause a denial of service (guest crash) or gain guest kernel mode privileges via vectors involving an (1) HLT, (2) LGDT, (3) LIDT, or (4) LMSW instruction.

CVSS 2.0 · 5.8 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Fedoraproject Opensuse and 1 more

Products

Debian Linux Fedora Opensuse and 1 more

CVE-2016-6494

mongodb: world-readable .dbshell history file

The client in MongoDB uses world-readable permissions on .dbshell history files, which might allow local users to obtain sensitive information by reading these files.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Mongodb

Products

Fedora Mongodb

CVE-2016-6323

glibc: Missing unwind info in __startcontext causes infinite loop in _Unwind_Backtrace

The makecontext function in the GNU C Library (aka glibc or libc6) before 2.25 creates execution contexts incompatible with the unwinder on ARM EABI (32-bit) platforms, which might allow context-dependent attackers to cause a denial of service (hang), as demonstrated by applications compiled using gccgo, related to backtrace generation.

CVSS 3.0 · 7.5 High EPSS 3.9% KEV · Not listed

Vendors

Fedoraproject Gnu Opensuse

Products

Fedora Glibc Opensuse

CVE-2014-7154

kernel: xen: Race condition in HVMOP_track_dirty_vram (XSA-104)

Race condition in HVMOP_track_dirty_vram in Xen 4.0.0 through 4.4.x does not ensure possession of the guarding lock for dirty video RAM tracking, which allows certain local guest domains to cause a denial of service via unspecified vectors.

CVSS 2.0 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Debian Fedoraproject Opensuse and 1 more

Products

Debian Linux Fedora Opensuse and 1 more

CVE-2014-6568

mysql: unspecified vulnerability related to Server:InnoDB:DML (CPU Jan 2015)

Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote authenticated users to affect availability via vectors related to Server : InnoDB : DML.

CVSS 2.0 · 3.5 Low EPSS 7.1% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 4 more

Products

Ubuntu Linux Debian Linux Fedora and 16 more

CVE-2016-6254

collectd: heap overflow in the network plugin

Heap-based buffer overflow in the parse_packet function in network.c in collectd before 5.4.3 and 5.x before 5.5.2 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted network packet.

CVSS 3.0 · 9.1 Critical EPSS 5.7% KEV · Not listed

Vendors

Collectd Debian Fedoraproject

Products

Collectd Debian Linux Fedora

CVE-2014-6394

nodejs-send: directory traversal vulnerability

visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "public-restricted" under a "public" directory.

CVSS 2.0 · 7.5 High EPSS 4.3% KEV · Not listed

Vendors

Apple Fedoraproject Joyent

Products

Xcode Fedora Node.js

CVE-2016-6185

perl: XSLoader loads relative paths not included in @INC

The XSLoader::load method in XSLoader in Perl does not properly locate .so files when called in a string eval, which might allow local users to execute arbitrary code via a Trojan horse library under the current working directory.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 2 more

Products

Ubuntu Linux Debian Linux Fedora and 2 more

CVE-2014-6055

libvncserver: server stacked-based buffer overflow flaws in file transfer handling

Multiple stack-based buffer overflows in the File Transfer feature in rfbserver.c in LibVNCServer 0.9.9 and earlier allow remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a (1) long file or (2) directory name or the (3) FileTime attribute in a rfbFileTransferOffer message.

CVSS 2.0 · 6.5 Medium EPSS 7.8% KEV · Not listed

Vendors

Debian Fedoraproject Libvncserver and 1 more

Products

Debian Linux Fedora Libvncserver and 4 more

CVE-2016-6153

sqlite: Tempdir selection vulnerability

os_unix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to obtain sensitive information, cause a denial of service (application crash), or have unspecified other impact by leveraging use of the current working directory for temporary files.

CVSS 3.0 · 5.9 Medium EPSS < 1% KEV · Not listed

Vendors

Fedoraproject Opensuse Sqlite

Products

Fedora Leap Sqlite

CVE-2014-6051

libvncserver: integer overflow flaw, leading to a heap-based buffer overflow in screen size handling

Integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows remote VNC servers to cause a denial of service (crash) and possibly execute arbitrary code via an advertisement for a large screen size, which triggers a heap-based buffer overflow.

CVSS 2.0 · 7.5 High EPSS 8.3% KEV · Not listed

Vendors

Debian Fedoraproject Libvncserver and 2 more

Products

Debian Linux Fedora Libvncserver and 5 more

CVE-2016-5766

gd: Integer overflow in _gd2GetHeader() resulting in heap overflow

Integer overflow in the _gd2GetHeader function in gd_gd2.c in the GD Graphics Library (aka libgd) before 2.2.3, as used in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via crafted chunk dimensions in an image.

CVSS 3.0 · 8.8 High EPSS 7.5% KEV · Not listed

Vendors

Debian Fedoraproject Freebsd and 3 more

Products

Debian Linux Fedora Freebsd and 5 more

CVE-2016-5421

curl: Use of connection struct after free

Use-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which connection is used or possibly have unspecified other impact via unknown vectors.

CVSS 3.1 · 8.1 High EPSS 8.0% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 3 more

Products

Ubuntu Linux Debian Linux Fedora and 4 more

CVE-2014-5353

krb5: NULL pointer dereference when using a ticket policy name as a password policy name

The krb5_ldap_get_password_policy_from_dn function in plugins/kdb/ldap/libkdb_ldap/ldap_pwd_policy.c in MIT Kerberos 5 (aka krb5) before 1.13.1, when the KDC uses LDAP, allows remote authenticated users to cause a denial of service (daemon crash) via a successful LDAP query with no results, as demonstrated by using an incorrect object type for a password policy.

CVSS 2.0 · 3.5 Low EPSS 5.0% KEV · Not listed

Vendors

Canonical Debian Fedoraproject and 4 more

Products

Ubuntu Linux Debian Linux Fedora and 10 more

CVE-2016-5407

libXv: Insufficient validation of server responses results in out-of bounds accesses

The (1) XvQueryAdaptors and (2) XvQueryEncodings functions in X.org libXv before 1.0.11 allow remote X servers to trigger out-of-bounds memory access operations via vectors involving length specifications in received data.

CVSS 3.0 · 9.8 Critical EPSS 4.5% KEV · Not listed

Vendors

Fedoraproject X.org

Products

Fedora Libxv

CVE-2016-5404

ipa: Insufficient privileges check in certificate revocation

The cert_revoke command in FreeIPA does not check for the "revoke certificate" permission, which allows remote authenticated users to revoke arbitrary certificates by leveraging the "retrieve certificate" permission.

CVSS 3.0 · 6.5 Medium EPSS 2.6% KEV · Not listed

Vendors

Fedoraproject Freeipa Oracle and 1 more

Products

Fedora Freeipa Linux and 1 more

CVE-2016-5387

HTTPD: sets environmental variable based on user supplied Proxy request header

The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue. NOTE: the vendor states "This mitigation has been assigned the identifier CVE-2016-5387"; in other words, this is not a CVE ID for a vulnerability.

CVSS 3.1 · 8.1 High EPSS 55.7% KEV · Not listed

Vendors

Apache Canonical Debian and 5 more

Products

Http Server Ubuntu Linux Debian Linux and 19 more

CVE-2016-5386

Go: sets environmental variable based on user supplied Proxy request header

The net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an "httpoxy" issue.

CVSS 3.1 · 8.1 High EPSS 5.2% KEV · Not listed

Vendors

Fedoraproject Golang Oracle and 1 more

Products

Fedora Go Linux and 4 more

CVE-2016-5385

PHP: sets environmental variable based on user supplied Proxy request header

PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv('HTTP_PROXY') call or (2) a CGI configuration of PHP, aka an "httpoxy" issue.

CVSS 3.1 · 8.1 High EPSS 50.4% KEV · Not listed

Vendors

Debian Drupal Fedoraproject and 5 more

Products

Debian Linux Drupal Fedora and 13 more