CVE-2016-7795

The managerinvokenotifymessage function in systemd 231 and earlier allows local users to cause a denial of service assertion failure and PID 1 hang via a zero-length message received over a notify socket...

CVE-2016-7795

The managerinvokenotifymessage function in systemd 231 and earlier allows local users to cause a denial of service assertion failure and PID 1 hang via a zero-length message received over a notify socket...

CVE-2016-7796

The managerdispatchnotifyfd function in systemd allows local users to cause a denial of service system hang via a zero-length message received over a notify socket, which causes an error to be returned and the notification handler to be disabled...

CVE-2016-7795

The managerinvokenotifymessage function in systemd 231 and earlier allows local users to cause a denial of service assertion failure and PID 1 hang via a zero-length message received over a notify socket...

CVE-2016-7795

CVE-2016-7795 affects systemd 231 and earlier, where manager_invoke_notify_message processes a zero-length notify socket message, enabling local users to trigger denial of service (assertion failure and PID 1 hang). Connected advisories (e.g., MiracleLinux AXSA-2016-832:08 and EulerOS security ad...

CVE-2016-3920

id3/ID3.cpp in libstagefright in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows remote attackers to cause a denial of service device hang or reboot via a crafted file, aka internal bug 30744884...

PT-2016-5748

Name of the Vulnerable Software and Affected Versions Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-10-01 Android versions 7.0 before 2016-10-01 Description The issue allows remote attackers to cause a denial of service, resulting in a...

CVE-2016-6323

The makecontext function in the GNU C Library aka glibc or libc6 before 2.25 creates execution contexts incompatible with the unwinder on ARM EABI 32-bit platforms, which might allow context-dependent attackers to cause a denial of service hang, as demonstrated by applications compiled using gccg...

CVE-2016-6323

The CVE-2016-6323 issue affects GNU C Library (glibc) on ARM EABI (32-bit): makecontext creates execution contexts incompatible with the unwinder, potentially allowing a context-dependent attacker to cause a denial of service (hang) in apps (notably gccgo). The vulnerability is fixed in glibc 2.2...

OpenSSL < 1.1.0a Multiple Vulnerabilities

Binary data 9626.prm...

PT-2016-7396

Name of the Vulnerable Software and Affected Versions systemd versions 231 and earlier Description The issue allows local users to cause a denial of service, resulting in an assertion failure and PID 1 hang, by sending a zero-length message over a notify socket. This is due to a problem in the...

MGASA-2016-0318 Updated libarchive packages fix security vulnerability

The updated packages fix several security vulnerabilities: A flaw was found in the way libarchive handled hardlink archive entries of non-zero size. Combined with flaws in libarchive's file system sandboxing, this issue could cause an application using libarchive to overwrite arbitrary files with...

PT-2016-7478

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 5.5.51 and earlier Oracle MySQL versions 5.6.32 and earlier Oracle MySQL versions 5.7.14 and earlier Description The issue allows remote authenticated users to affect availability via vectors related to Server: Types. It ...

Null pointer dereference

arm-wt-22k/libsrc/easmdls.c in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-09-01 allows remote attackers to cause a denial of service NULL pointer dereference, and device hang or reboot via a crafted media file, aka internal bug 29770686...

CVE-2016-3878

decoder/ih264dapi.c in mediaserver in Android 6.x before 2016-09-01 mishandles the case of decoding zero MBs, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 29493002...

CVE-2016-3881

The decoderpeeksiinternal function in vp9/vp9dxiface.c in libvpx in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 allows remote attackers to cause a denial of service buffer over-read, and device hang or reboot vi...

CVE-2016-3878: Improper Access Control

decoder/ih264dapi.c in mediaserver in Android 6.x before 2016-09-01 mishandles the case of decoding zero MBs, which allows remote attackers to cause a denial of service device hang or reboot via a crafted media file, aka internal bug 29493002...

PT-2016-5712

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.3 Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-09-01 Android versions 7.0 before 2016-09-01 Description The issue allows remote attackers to cause a...

PT-2016-3288

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 1.0.1u OpenSSL versions prior to 1.0.2i OpenSSL versions prior to 1.1.0a MySQL Server versions 5.6.33 and earlier MySQL Server versions 5.7.15 and earlier Description The issue is related to multiple memory leaks in t...

PT-2016-2558

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-01 Description The issue is related to the ih264d decoder in the mediaserver of Android, where certain structure members are not initialized. This allows remote attackers to cause a denial of service, resultin...