# CVEs published 2016-12-08

13 CVEs were published on December 8, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-8966](https://cve.now/CVE-2015-8966.md): arch/arm/kernel/sys\_oabi-compat.c in the Linux kernel before 4.4 allows local users to gain privileges via a crafted (1) F\_OFD\_GETLK, (2)… (no CVSS)
- [CVE-2015-8967](https://cve.now/CVE-2015-8967.md): arch/arm64/kernel/sys.c in the Linux kernel before 4.0 allows local users to bypass the "strict page permissions" protection mechanism and… (no CVSS)
- [CVE-2016-9120](https://cve.now/CVE-2016-9120.md): Race condition in the ion\_ioctl function in drivers/staging/android/ion/ion.c in the Linux kernel before 4.6 allows local users to gain… (no CVSS)
- [CVE-2016-9920](https://cve.now/CVE-2016-9920.md): steps/mail/sendmail.inc in Roundcube before 1.1.7 and 1.2.x before 1.2.3, when no SMTP server is configured and the sendmail program is… (no CVSS)
- [CVE-2016-8102](https://cve.now/CVE-2016-8102.md): Unquoted service path vulnerability in Intel Wireless Bluetooth Drivers 16.x, 17.x, and before 18.1.1607.3129 allows local users to launch… (no CVSS, Intel Wireless Bluetooth Drivers)
- [CVE-2016-8103](https://cve.now/CVE-2016-8103.md): SMM call out in all Intel Branded NUC Kits allows a local privileged user to access the System Management Mode and take full control of… (no CVSS, Intel NUC Kits)
- [CVE-2016-8104](https://cve.now/CVE-2016-8104.md): Buffer overflow in Intel PROSet/Wireless Software and Drivers in versions before 19.20.3 allows a local user to crash iframewrk.exe… (no CVSS, Intel PROSet/Wireless Software and Drivers)
- [CVE-2016-9919](https://cve.now/CVE-2016-9919.md): The icmp6\_send function in net/ipv6/icmp.c in the Linux kernel through 4.8.12 omits a certain check of the dst data structure, which… (no CVSS)
- [CVE-2016-8655](https://cve.now/CVE-2016-8655.md): Race condition in net/packet/af\_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of… (no CVSS)
- [CVE-2016-9839](https://cve.now/CVE-2016-9839.md): In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails. (no CVSS)
- [CVE-2016-9888](https://cve.now/CVE-2016-9888.md): An error within the "tar\_directory\_for\_file()" function (gsf-infile-tar.c) in GNOME Structured File Library before 1.14.41 can be… (no CVSS)
- [CVE-2016-9917](https://cve.now/CVE-2016-9917.md): In BlueZ 5.42, a buffer overflow was observed in "read\_n" function in "tools/hcidump.c" source file. (no CVSS)
- [CVE-2016-9918](https://cve.now/CVE-2016-9918.md): In BlueZ 5.42, an out-of-bounds read was identified in "packet\_hexdump" function in "monitor/packet.c" source file. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2016-12-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.