# CVEs published 2015-11-16

13 CVEs were published on November 16, 2015: 1 critical, 0 high. Days are UTC.

- [CVE-2015-2924](https://cve.now/CVE-2015-2924.md): The receive\_ra function in rdisc/nm-lndp-rdisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in NetworkManager (no CVSS)
- [CVE-2015-8215](https://cve.now/CVE-2015-8215.md): net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel before 4.0 does not validate attempted changes to the MTU value, which allows cont (no CVSS)
- [CVE-2014-9752](https://cve.now/CVE-2014-9752.md): Unrestricted file upload vulnerability in mods/\_core/properties/lib/course.inc.php in ATutor before 2.2 patch 6 allows remote authenticated (no CVSS)
- [CVE-2015-7712](https://cve.now/CVE-2015-7712.md): Multiple eval injection vulnerabilities in mods/\_standard/gradebook/edit\_marks.php in ATutor 2.2 and earlier allow remote authenticated user (no CVSS)
- [CVE-2015-7815](https://cve.now/CVE-2015-7815.md): Directory traversal vulnerability in core/ViewDataTable/Factory.php in Piwik before 2.15.0 allows remote attackers to include and execute ar (no CVSS)
- [CVE-2015-7816](https://cve.now/CVE-2015-7816.md): The DisplayTopKeywords function in plugins/Referrers/Controller.php in Piwik before 2.15.0 allows remote attackers to conduct PHP object inj (no CVSS)
- [CVE-2015-7897](https://cve.now/CVE-2015-7897.md): The media scanning functionality in the face recognition library in android.media.process in Samsung Galaxy S6 Edge before G925VVRU4B0G9 all (no CVSS)
- [CVE-2015-2925](https://cve.now/CVE-2015-2925.md): The prepend\_path function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly handle rename actions inside a bind mount, which (no CVSS)
- [CVE-2015-5257](https://cve.now/CVE-2015-5257.md): drivers/usb/serial/whiteheat.c in the Linux kernel before 4.2.4 allows physically proximate attackers to cause a denial of service (NULL poi (no CVSS)
- [CVE-2015-5307](https://cve.now/CVE-2015-5307.md): The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host O (no CVSS)
- [CVE-2015-7312](https://cve.now/CVE-2015-7312.md): Multiple race conditions in the Advanced Union Filesystem (aufs) aufs3-mmap.patch and aufs4-mmap.patch patches for the Linux kernel 3.x and (no CVSS)
- [CVE-2015-7872](https://cve.now/CVE-2015-7872.md): The key\_gc\_unused\_keys function in security/keys/gc.c in the Linux kernel through 4.2.6 allows local users to cause a denial of service (OOP (no CVSS)
- [CVE-2015-8104](https://cve.now/CVE-2015-8104.md): The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host O (CVSS 10.0)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-11-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.