# CVEs published 2016-06-27

14 CVEs were published on June 27, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2014-9903](https://cve.now/CVE-2014-9903.md): The sched\_read\_attr function in kernel/sched/core.c in the Linux kernel 3.14-rc before 3.14-rc4 uses an incorrect size, which allows local u (no CVSS)
- [CVE-2014-9904](https://cve.now/CVE-2014-9904.md): The snd\_compress\_check\_input function in sound/core/compress\_offload.c in the ALSA subsystem in the Linux kernel before 3.17 does not proper (no CVSS)
- [CVE-2016-0758](https://cve.now/CVE-2016-0758.md): Integer overflow in lib/asn1\_decoder.c in the Linux kernel before 4.6 allows local users to gain privileges via crafted ASN.1 data. (no CVSS)
- [CVE-2016-1583](https://cve.now/CVE-2016-1583.md): The ecryptfs\_privileged\_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cau (no CVSS)
- [CVE-2016-3707](https://cve.now/CVE-2016-3707.md): The icmp\_check\_sysrq function in net/ipv4/icmp.c in the kernel.org projects/rt patches for the Linux kernel, as used in the kernel-rt packag (no CVSS)
- [CVE-2016-3713](https://cve.now/CVE-2016-3713.md): The msr\_mtrr\_valid function in arch/x86/kvm/mtrr.c in the Linux kernel before 4.6.1 supports MSR 0x2f8, which allows guest OS users to read (no CVSS)
- [CVE-2016-3949](https://cve.now/CVE-2016-3949.md): Siemens SIMATIC S7-300 Profinet-enabled CPU devices with firmware before 3.2.12 and SIMATIC S7-300 Profinet-disabled CPU devices with firmwa (no CVSS)
- [CVE-2016-4440](https://cve.now/CVE-2016-4440.md): arch/x86/kvm/vmx.c in the Linux kernel through 4.6.3 mishandles the APICv on/off state, which allows guest OS users to obtain direct APIC MS (no CVSS)
- [CVE-2016-4470](https://cve.now/CVE-2016-4470.md): The key\_reject\_and\_link function in security/keys/key.c in the Linux kernel through 4.6.3 does not ensure that a certain data structure is i (no CVSS)
- [CVE-2016-5243](https://cve.now/CVE-2016-5243.md): The tipc\_nl\_compat\_link\_dump function in net/tipc/netlink\_compat.c in the Linux kernel through 4.6.3 does not properly copy a certain string (no CVSS)
- [CVE-2016-5244](https://cve.now/CVE-2016-5244.md): The rds\_inc\_info\_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which all (no CVSS)
- [CVE-2016-5728](https://cve.now/CVE-2016-5728.md): Race condition in the vop\_ioctl function in drivers/misc/mic/vop/vop\_vringh.c in the MIC VOP driver in the Linux kernel before 4.6.1 allows (no CVSS)
- [CVE-2016-5828](https://cve.now/CVE-2016-5828.md): The start\_thread function in arch/powerpc/kernel/process.c in the Linux kernel through 4.6.3 on powerpc platforms mishandles transactional s (no CVSS)
- [CVE-2016-5829](https://cve.now/CVE-2016-5829.md): Multiple heap-based buffer overflows in the hiddev\_ioctl\_usage function in drivers/hid/usbhid/hiddev.c in the Linux kernel through 4.6.3 all (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-06-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.