# CVEs published 2016-03-17

4 CVEs were published on March 17, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-2345](https://cve.now/CVE-2016-2345.md): Stack-based buffer overflow in dwrcs.exe in the dwmrcs daemon in SolarWinds DameWare Mini Remote Control 12.0 allows remote attackers to exe (no CVSS)
- [CVE-2016-3191](https://cve.now/CVE-2016-3191.md): The compile\_branch function in pcre\_compile.c in PCRE 8.x before 8.39 and pcre2\_compile.c in PCRE2 before 10.22 mishandles patterns containi (no CVSS)
- [CVE-2016-1992](https://cve.now/CVE-2016-1992.md): HPE ArcSight ESM before 6.8c, and ArcSight ESM Express before 6.9.1, allows remote authenticated users to obtain sensitive information via u (no CVSS)
- [CVE-2016-2342](https://cve.now/CVE-2016-2342.md): The bgp\_nlri\_parse\_vpnv4 function in bgp\_mplsvpn.c in the VPNv4 NLRI parser in bgpd in Quagga before 1.0.20160309, when a certain VPNv4 conf (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-03-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.