Debian

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-8909 4Debian OpensuseQemu+1 more 5Debian Linux LeapOpenstack+2 more May 6, 2026 Nov 4, 2016 N/A· v4 6.0 MEDIUM· v3 2.1 LOW· v2 The intel_hda_xfer function in hw/audio/intel-hda.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via an entry with the same value for...Show more The intel_hda_xfer function in hw/audio/intel-hda.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via an entry with the same value for buffer length and pointer position.Show less
CVE-2016-8669 4Debian OpensuseQemu+1 more 5Debian Linux LeapOpenstack+2 more May 6, 2026 Nov 4, 2016 N/A· v4 6.0 MEDIUM· v3 2.1 LOW· v2 The serial_update_parameters function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving...Show more The serial_update_parameters function in hw/char/serial.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving a value of divider greater than baud base.Show less
CVE-2016-8667 3Debian OpensuseQemu 3Debian Linux LeapQemu May 6, 2026 Nov 4, 2016 N/A· v4 6.0 MEDIUM· v3 2.1 LOW· v2 The rc4030_write function in hw/dma/rc4030.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via a large interval timer reload...Show more The rc4030_write function in hw/dma/rc4030.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via a large interval timer reload value.Show less
CVE-2016-8578 3Debian OpensuseQemu 3Debian Linux LeapQemu May 6, 2026 Nov 4, 2016 N/A· v4 6.0 MEDIUM· v3 2.1 LOW· v2 The v9fs_iov_vunmarshal function in fsdev/9p-iov-marshal.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) by sending an em...Show more The v9fs_iov_vunmarshal function in fsdev/9p-iov-marshal.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) by sending an empty string parameter to a 9P operation.Show less
CVE-2016-8577 3Debian OpensuseQemu 3Debian Linux LeapQemu May 6, 2026 Nov 4, 2016 N/A· v4 6.0 MEDIUM· v3 2.1 LOW· v2 Memory leak in the v9fs_read function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via vectors related to an I/O read operation.
CVE-2016-8576 4Debian OpensuseQemu+1 more 5Debian Linux LeapOpenstack+2 more May 6, 2026 Nov 4, 2016 N/A· v4 6.0 MEDIUM· v3 2.1 LOW· v2 The xhci_ring_fetch function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging failure to limit the n...Show more The xhci_ring_fetch function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging failure to limit the number of link Transfer Request Blocks (TRB) to process.Show less
CVE-2016-9190 2Debian Python 2Debian Linux Pillow May 6, 2026 Nov 4, 2016 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the "crafted image file" approach, related to an "Insecure Sign Extension" issue affecting the ImagingNew in Storage.c component.
CVE-2016-9189 2Debian Python 2Debian Linux Pillow May 6, 2026 Nov 4, 2016 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by using the "crafted image file" approach, related to an "Integer Overflow" issue affecting the Image.core.map_buffer in map.c compo...Show more Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by using the "crafted image file" approach, related to an "Integer Overflow" issue affecting the Image.core.map_buffer in map.c component.Show less
CVE-2016-8864 4Debian IscNetapp+1 more 11Bind Data Ontap EdgeDebian Linux+8 more May 6, 2026 Nov 2, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer sectio...Show more named in ISC BIND 9.x before 9.9.9-P4, 9.10.x before 9.10.4-P4, and 9.11.x before 9.11.0-P1 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a DNAME record in the answer section of a response to a recursive query, related to db.c and resolver.c.Show less
CVE-2016-5584 3Debian MariadbOracle 3Debian Linux MariadbMysql May 6, 2026 Oct 25, 2016 N/A· v4 4.4 MEDIUM· v3 3.5 LOW· v2 Unspecified vulnerability in Oracle MySQL 5.5.52 and earlier, 5.6.33 and earlier, and 5.7.15 and earlier allows remote administrators to affect confidentiality via vectors related to Server: Security: Encryption.
CVE-2016-7117 3Canonical DebianLinux 3Debian Linux Linux KernelUbuntu Linux May 6, 2026 Oct 10, 2016 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandl...Show more Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux kernel before 4.5.2 allows remote attackers to execute arbitrary code via vectors involving a recvmmsg system call that is mishandled during error processing.Show less
CVE-2016-7424 2Debian Libav 2Debian Linux Libav May 6, 2026 Oct 7, 2016 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 The put_no_rnd_pixels8_xy2_mmx function in x86/rnd_template.c in libav 11.7 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted MP3 file.
CVE-2016-7909 2Debian Qemu 2Debian Linux Qemu May 6, 2026 Oct 5, 2016 N/A· v4 4.4 MEDIUM· v3 4.9 MEDIUM· v2 The pcnet_rdra_addr function in hw/net/pcnet.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by setting the (1) receive or (2) trans...Show more The pcnet_rdra_addr function in hw/net/pcnet.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by setting the (1) receive or (2) transmit descriptor ring length to 0.Show less
CVE-2016-7908 2Debian Qemu 2Debian Linux Qemu May 6, 2026 Oct 5, 2016 N/A· v4 4.4 MEDIUM· v3 2.1 LOW· v2 The mcf_fec_do_tx function in hw/net/mcf_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of s...Show more The mcf_fec_do_tx function in hw/net/mcf_fec.c in QEMU (aka Quick Emulator) does not properly limit the buffer descriptor count when transmitting packets, which allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags.Show less
CVE-2016-7161 2Debian Qemu 2Debian Linux Qemu May 6, 2026 Oct 5, 2016 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allows attackers to execute arbitrary code on the QEMU host via a large ethlite packet.
CVE-2016-1246 2Dbd Mysql Project Debian 2Dbd Mysql Debian Linux May 6, 2026 Oct 5, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Buffer overflow in the DBD::mysql module before 4.037 for Perl allows context-dependent attackers to cause a denial of service (crash) via vectors related to an error message.
CVE-2016-7401 3Canonical DebianDjangoproject 3Debian Linux DjangoUbuntu Linux May 6, 2026 Oct 3, 2016 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting arbitrary cookies.
CVE-2016-1244 2Debian Unadf Project 2Debian Linux Unadf May 6, 2026 Oct 3, 2016 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 The extractTree function in unADF allows remote attackers to execute arbitrary code via shell metacharacters in a directory name in an adf file.
CVE-2016-1243 2Debian Unadf Project 2Debian Linux Unadf May 6, 2026 Oct 3, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Stack-based buffer overflow in the extractTree function in unADF allows remote attackers to execute arbitrary code via a long pathname.
CVE-2016-5180 5C Ares C Ares ProjectCanonical+2 more 5C Ares C AresDebian Linux+2 more May 6, 2026 Oct 3, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly execute arbitrary code via a hostname with a...Show more Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly execute arbitrary code via a hostname with an escaped trailing dot.Show less

Previous 1...417418419...508 Next