Skip to contentOracle Linux vulnerabilities
- mariadb, oracle mysql, canonical ubuntu linux +2 more +4 moreUnspecified vulnerability in Oracle MySQL 5.5.49 and earlier, 5.6.30 and earlier, and 5.7.12 and...CVE-2016-3477Fix available8.1 High
- apache tomcat, hp system management homepage, oracle linux +8 more +10 moreImproper Access Control in Apache TomcatCVE-2016-5388Fix availableEPSS 50.9%8.1 High
- apache http server, canonical ubuntu linux, debian linux +16 more +18 moreThe Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not...CVE-2016-5387Fix availableEPSS 55.7%8.1 High
- golang go, fedoraproject fedora, oracle linux +3 more +5 moreThe net/http package in Go through 1.6 does not attempt to address RFC 3875 section 4.1.18...CVE-2016-5386Fix available8.1 High
- php, debian linux, drupal +9 more +11 moreHTTP Proxy header vulnerabilityCVE-2016-5385Fix availableEPSS 50.4%8.1 High
- linux kernel, oracle linux, novell suse linux enterprise real time extension +11 more +13 moreThe key_reject_and_link function in security/keys/key.c in the Linux kernel through 4.6.3 does...CVE-2016-4470Fix available5.5 Medium
- libarchive, oracle linux, solaris +7 more +9 moreInteger overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a...CVE-2016-5844Fix available6.5 Medium
- linux kernel, oracle linux, canonical ubuntu linux +2 moreThe IPT_SO_SET_REPLACE setsockopt implementation in the netfilter subsystem in the Linux kernel...CVE-2016-4998Public exploitFix available7.1 High
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreThe compat IPT_SO_SET_REPLACE and IP6T_SO_SET_REPLACE setsockopt implementations in the netfilter...CVE-2016-4997Public exploitFix available7.8 High
- openssl, canonical ubuntu linux, debian linux +3 more +5 moreThe dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly...CVE-2016-2178Fix available5.5 Medium
- openssl, hp icewall mcrp, icewall sso +3 more +5 moreOpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which...CVE-2016-2177Fix availableEPSS 44.5%9.8 Critical
- libarchive, oracle linux, redhat enterprise linux desktop +6 more +8 moreThe archive_read_format_cpio_read_header function in archive_read_support_format_cpio.c in...CVE-2016-4809Fix available7.5 High
- xmlsoft libxml2, apple icloud, iphone os +15 more +17 moreFormat string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact...CVE-2016-4448Fix available9.8 Critical
- qemu, canonical ubuntu linux, debian linux +8 more +10 moreHeap-based buffer overflow in the iscsi_aio_ioctl function in block/iscsi.c in QEMU allows local...CVE-2016-5126Fix available7.8 High
- graphicsmagick, imagemagick, canonical ubuntu linux +10 more +12 moreThe OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote...CVE-2016-5118Fix availableEPSS 50.0%9.8 Critical
- linux kernel, oracle linux, canonical ubuntu linux +2 moreThe tipc_nl_publ_dump function in net/tipc/socket.c in the Linux kernel through 4.6 does not...CVE-2016-4951Fix available7.8 High
- linux kernel, oracle linux, canonical ubuntu linux +3 more +5 moreThe get_rock_ridge_filename function in fs/isofs/rock.c in the Linux kernel before 4.5.5...CVE-2016-4913Fix available7.8 High
- linux kernel, oracle linux, canonical ubuntu linux +9 more +11 moreUse-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2...CVE-2016-4805Fix available7.8 High
- linux kernel, oracle linux, canonical ubuntu linux +2 morefs/pnode.c in the Linux kernel before 4.5.4 does not properly traverse a mount propagation tree...CVE-2016-4581Fix available5.5 Medium
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moreDouble free vulnerability in Esi.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows...CVE-2016-4556Fix availableEPSS 23.1%7.5 High
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moreclient_side_request.cc in Squid 3.x before 3.5.18 and 4.x before 4.0.10 allows remote servers to...CVE-2016-4555Fix availableEPSS 18.2%7.5 High
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moremime_header.cc in Squid before 3.5.18 allows remote attackers to bypass intended same-origin...CVE-2016-4554Fix availableEPSS 38.9%8.6 High
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moreclient_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host...CVE-2016-4553Fix availableEPSS 80.0%8.6 High
- qemu, canonical ubuntu linux, citrix xenserver +11 more +13 moreThe VGA module in QEMU improperly performs bounds checking on banked access to video memory,...CVE-2016-3710Fix available8.8 High
- imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 moreThe (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow...CVE-2016-3718In KEVPublic exploitFix availableEPSS 75.6%5.5 Medium
- imagemagick, canonical ubuntu linux, opensuse leap +27 more +29 moreThe EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers...CVE-2016-3715In KEVPublic exploitFix availableEPSS 75.3%5.5 Medium
- ntp, debian linux, freebsd +13 more +15 moreThe MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote...CVE-2016-2518Fix availableEPSS 15.1%5.3 Medium
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moreBuffer overflow in Squid 3.x before 3.5.17 and 4.x before 4.0.9 allows remote attackers to...CVE-2016-4054Fix availableEPSS 77.6%8.1 High
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moreSquid 3.x before 3.5.17 and 4.x before 4.0.9 allow remote attackers to obtain sensitive stack...CVE-2016-4053Fix availableEPSS 14.4%3.7 Low
- squid-cache squid, canonical ubuntu linux, oracle linux +2 moreBuffer overflow in cachemgr.cgi in Squid 2.x, 3.x before 3.5.17, and 4.x before 4.0.9 might allow...CVE-2016-4051Fix availableEPSS 18.3%8.8 High
- oracle jrockit, apache cassandra, canonical ubuntu linux +35 more +37 moreUnspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and...CVE-2016-3427In KEVFix availableEPSS 92.3%9.8 Critical
- oracle jrockit, jdk, jre +9 more +11 moreUnspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and...CVE-2016-0695Fix available5.9 Medium
- mariadb, oracle mysql, debian linux +3 more +5 moreUnspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and...CVE-2016-0666Fix available5.5 Medium
- mariadb, oracle mysql, debian linux +3 more +5 moreUnspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and...CVE-2016-0650Fix available5.5 Medium
- mariadb, oracle mysql, debian linux +3 more +5 moreUnspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and...CVE-2016-0649Fix available5.5 Medium
- mariadb, oracle mysql, debian linux +3 more +5 moreUnspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and...CVE-2016-0648Fix available5.5 Medium
- mariadb, oracle mysql, debian linux +3 more +5 moreUnspecified vulnerability in Oracle MySQL 5.5.48 and earlier, 5.6.29 and earlier, and 5.7.11 and...CVE-2016-0647Fix available5.5 Medium
- mariadb, oracle mysql, debian linux +3 more +5 moreUnspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and...CVE-2016-0646Fix available5.5 Medium
- mariadb, oracle mysql, debian linux +3 more +5 moreUnspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and...CVE-2016-0644Fix available5.5 Medium
- mariadb, oracle mysql, debian linux +3 more +5 moreUnspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and...CVE-2016-0641Fix available5.1 Medium
- mariadb, oracle mysql, debian linux +3 more +5 moreUnspecified vulnerability in Oracle MySQL 5.5.47 and earlier, 5.6.28 and earlier, and 5.7.10 and...CVE-2016-0640Fix available6.1 Medium
- linuxfoundation foomatic-filters, oracle linux, redhat enterprise linux +5 more +7 moreHeap-based buffer overflow in the unhtmlify function in foomatic-rip in foomatic-filters before 4...CVE-2010-5325Fix available9.8 Critical
- debian linux, linux kernel, redhat enterprise linux +2 moreThe fork implementation in the Linux kernel before 4.5 on s390 platforms mishandles the case of...CVE-2016-2143Fix available7.8 High
- mozilla firefox, thunderbird, opensuse leap +3 more +5 moreThe nsScannerString::AppendUnicodeTo function in Mozilla Firefox before 45.0 and Firefox ESR 38.x...CVE-2016-1974Fix available8.8 High
- mozilla firefox, oracle linux +1 moreRace condition in the GetStaticInstance function in the WebRTC implementation in Mozilla Firefox...CVE-2016-1973Fix available8.8 High
- mozilla firefox, thunderbird, opensuse +1 more +3 moreThe nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRuntime.cpp in Mozilla...CVE-2016-1966Fix available8.8 High
- mozilla firefox, opensuse, oracle linux +2 moreMozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle a navigation sequence that...CVE-2016-1965Fix available4.3 Medium
- mozilla firefox, thunderbird, opensuse leap +3 more +5 moreUse-after-free vulnerability in the AtomicBaseIncDec function in Mozilla Firefox before 45.0 and...CVE-2016-1964Fix available8.8 High
- mozilla firefox, opensuse, oracle linux +2 moreUse-after-free vulnerability in the mozilla::DataChannelConnection::Close function in Mozilla...CVE-2016-1962Fix available9.8 Critical
- mozilla firefox, thunderbird, opensuse leap +3 more +5 moreUse-after-free vulnerability in the nsHTMLDocument::SetBody function in dom/html/nsHTMLDocument...CVE-2016-1961Fix available8.8 High
- Show moreLoading…