# CVEs published 2016-10-16

14 CVEs were published on October 16, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-3288](https://cve.now/CVE-2015-3288.md): mm/memory.c in the Linux kernel before 4.1.4 mishandles anonymous pages, which allows local users to gain privileges or cause a denial of… (no CVSS)
- [CVE-2015-8952](https://cve.now/CVE-2015-8952.md): The mbcache feature in the ext2 and ext4 filesystem implementations in the Linux kernel before 4.6 mishandles xattr block caching, which… (no CVSS)
- [CVE-2015-8953](https://cve.now/CVE-2015-8953.md): fs/overlayfs/copy\_up.c in the Linux kernel before 4.2.6 uses an incorrect cleanup code path, which allows local users to cause a denial of… (no CVSS)
- [CVE-2016-0204](https://cve.now/CVE-2016-0204.md): Open redirect vulnerability in IBM Cloud Orchestrator 2.4.x before 2.4.0 FP3 allows remote authenticated users to redirect users to… (no CVSS)
- [CVE-2016-0249](https://cve.now/CVE-2016-0249.md): SQL injection vulnerability in IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x… (no CVSS)
- [CVE-2016-6327](https://cve.now/CVE-2016-6327.md): drivers/infiniband/ulp/srpt/ib\_srpt.c in the Linux kernel before 4.5.1 allows local users to cause a denial of service (NULL pointer… (no CVSS)
- [CVE-2016-6828](https://cve.now/CVE-2016-6828.md): The tcp\_check\_send\_head function in include/net/tcp.h in the Linux kernel before 4.7.5 does not properly maintain certain SACK state after… (no CVSS)
- [CVE-2016-7039](https://cve.now/CVE-2016-7039.md): The IP stack in the Linux kernel through 4.8.2 allows remote attackers to cause a denial of service (stack consumption and panic) or… (no CVSS)
- [CVE-2016-7042](https://cve.now/CVE-2016-7042.md): The proc\_keys\_show function in security/keys/proc.c in the Linux kernel through 4.8.2, when the GNU Compiler Collection (gcc) stack… (no CVSS)
- [CVE-2016-7097](https://cve.now/CVE-2016-7097.md): The filesystem implementation in the Linux kernel through 4.8.2 preserves the setgid bit during a setxattr call, which allows local users… (no CVSS)
- [CVE-2016-7425](https://cve.now/CVE-2016-7425.md): The arcmsr\_iop\_message\_xfer function in drivers/scsi/arcmsr/arcmsr\_hba.c in the Linux kernel through 4.8.2 does not restrict a certain… (no CVSS)
- [CVE-2016-8658](https://cve.now/CVE-2016-8658.md): Stack-based buffer overflow in the brcmf\_cfg80211\_start\_ap function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the… (no CVSS)
- [CVE-2016-8660](https://cve.now/CVE-2016-8660.md): The XFS subsystem in the Linux kernel through 4.8.2 allows local users to cause a denial of service (fdatasync failure and system hang) by… (no CVSS)
- [CVE-2016-8666](https://cve.now/CVE-2016-8666.md): The IP stack in the Linux kernel before 4.6 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2016-10-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.