# CVEs published 2016-08-06

73 CVEs were published on August 6, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2016-6503](https://cve.now/CVE-2016-6503.md): The CORBA IDL dissectors in Wireshark 2.x before 2.0.5 on 64-bit Windows platforms do not properly interact with Visual C++ compiler options (no CVSS)
- [CVE-2016-6504](https://cve.now/CVE-2016-6504.md): epan/dissectors/packet-ncp2222.inc in the NDS dissector in Wireshark 1.12.x before 1.12.13 does not properly maintain a ptvc data structure, (no CVSS)
- [CVE-2016-6505](https://cve.now/CVE-2016-6505.md): epan/dissectors/packet-packetbb.c in the PacketBB dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers (no CVSS)
- [CVE-2016-6506](https://cve.now/CVE-2016-6506.md): epan/dissectors/packet-wsp.c in the WSP dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a (no CVSS)
- [CVE-2016-6507](https://cve.now/CVE-2016-6507.md): epan/dissectors/packet-mmse.c in the MMSE dissector in Wireshark 1.12.x before 1.12.13 allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2016-6508](https://cve.now/CVE-2016-6508.md): epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 uses an incorrect integer data typ (no CVSS)
- [CVE-2016-6509](https://cve.now/CVE-2016-6509.md): epan/dissectors/packet-ldss.c in the LDSS dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 mishandles conversations, which (no CVSS)
- [CVE-2016-6510](https://cve.now/CVE-2016-6510.md): Off-by-one error in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote (no CVSS)
- [CVE-2016-6511](https://cve.now/CVE-2016-6511.md): epan/proto.c in Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5 allows remote attackers to cause a denial of service (OpenFlow dissecto (no CVSS)
- [CVE-2016-6512](https://cve.now/CVE-2016-6512.md): epan/dissectors/packet-wap.c in Wireshark 2.x before 2.0.5 omits an overflow check in the tvb\_get\_guintvar function, which allows remote att (no CVSS)
- [CVE-2016-6513](https://cve.now/CVE-2016-6513.md): epan/dissectors/packet-wbxml.c in the WBXML dissector in Wireshark 2.x before 2.0.5 does not restrict the recursion depth, which allows remo (no CVSS)
- [CVE-2016-3070](https://cve.now/CVE-2016-3070.md): The trace\_writeback\_dirty\_page implementation in include/trace/events/writeback.h in the Linux kernel before 4.4 improperly interacts with m (no CVSS)
- [CVE-2016-3841](https://cve.now/CVE-2016-3841.md): The IPv6 stack in the Linux kernel before 4.3.3 mishandles options data, which allows local users to gain privileges or cause a denial of se (no CVSS)
- [CVE-2016-5400](https://cve.now/CVE-2016-5400.md): Memory leak in the airspy\_probe function in drivers/media/usb/airspy/airspy.c in the airspy USB driver in the Linux kernel before 4.7 allows (no CVSS)
- [CVE-2016-5412](https://cve.now/CVE-2016-5412.md): arch/powerpc/kvm/book3s\_hv\_rmhandlers.S in the Linux kernel through 4.7 on PowerPC platforms, when CONFIG\_KVM\_BOOK3S\_64\_HV is enabled, allow (no CVSS)
- [CVE-2016-5696](https://cve.now/CVE-2016-5696.md): net/ipv4/tcp\_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier fo (no CVSS)
- [CVE-2016-6136](https://cve.now/CVE-2016-6136.md): Race condition in the audit\_log\_single\_execve\_arg function in kernel/auditsc.c in the Linux kernel through 4.7 allows local users to bypass (no CVSS)
- [CVE-2016-6156](https://cve.now/CVE-2016-6156.md): Race condition in the ec\_device\_ioctl\_xcmd function in drivers/platform/chrome/cros\_ec\_dev.c in the Linux kernel before 4.7 allows local use (no CVSS)
- [CVE-2016-6162](https://cve.now/CVE-2016-6162.md): net/core/skbuff.c in the Linux kernel 4.7-rc6 allows local users to cause a denial of service (panic) or possibly have unspecified other imp (no CVSS)
- [CVE-2016-6187](https://cve.now/CVE-2016-6187.md): The apparmor\_setprocattr function in security/apparmor/lsm.c in the Linux kernel before 4.6.5 does not validate the buffer size, which allow (no CVSS)
- [CVE-2016-6197](https://cve.now/CVE-2016-6197.md): fs/overlayfs/dir.c in the OverlayFS filesystem implementation in the Linux kernel before 4.6 does not properly verify the upper dentry befor (no CVSS)
- [CVE-2016-6198](https://cve.now/CVE-2016-6198.md): The filesystem layer in the Linux kernel before 4.5.5 proceeds with post-rename operations after an OverlayFS file is renamed to a self-hard (no CVSS)
- [CVE-2016-6480](https://cve.now/CVE-2016-6480.md): Race condition in the ioctl\_send\_fib function in drivers/scsi/aacraid/commctrl.c in the Linux kernel through 4.7 allows local users to cause (no CVSS)
- [CVE-2016-6516](https://cve.now/CVE-2016-6516.md): Race condition in the ioctl\_file\_dedupe\_range function in fs/ioctl.c in the Linux kernel through 4.7 allows local users to cause a denial of (no CVSS)
- [CVE-2014-9863](https://cve.now/CVE-2014-9863.md): Integer underflow in the diag driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices allows attacker (no CVSS)
- [CVE-2014-9864](https://cve.now/CVE-2014-9864.md): drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not validate ioctl calls (no CVSS)
- [CVE-2014-9865](https://cve.now/CVE-2014-9865.md): drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not properly restrict us (no CVSS)
- [CVE-2014-9866](https://cve.now/CVE-2014-9866.md): drivers/media/platform/msm/camera\_v2/sensor/csid/msm\_csid.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) (no CVSS)
- [CVE-2014-9867](https://cve.now/CVE-2014-9867.md): drivers/media/platform/msm/camera\_v2/isp/msm\_isp\_axi\_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) (no CVSS)
- [CVE-2014-9868](https://cve.now/CVE-2014-9868.md): drivers/media/platform/msm/camera\_v2/sensor/csiphy/msm\_csiphy.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (20 (no CVSS)
- [CVE-2014-9869](https://cve.now/CVE-2014-9869.md): drivers/media/platform/msm/camera\_v2/isp/msm\_isp\_stats\_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013 (no CVSS)
- [CVE-2014-9870](https://cve.now/CVE-2014-9870.md): The Linux kernel before 3.11 on ARM platforms, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does not properly consi (no CVSS)
- [CVE-2014-9871](https://cve.now/CVE-2014-9871.md): Multiple buffer overflows in drivers/media/platform/msm/camera\_v2/isp/msm\_isp\_util.c in the Qualcomm components in Android before 2016-08-05 (no CVSS)
- [CVE-2014-9872](https://cve.now/CVE-2014-9872.md): The diag driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not ensure unique identifiers in a DCI clien (no CVSS)
- [CVE-2014-9873](https://cve.now/CVE-2014-9873.md): Integer underflow in drivers/char/diag/diag\_dci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices al (no CVSS)
- [CVE-2014-9874](https://cve.now/CVE-2014-9874.md): Buffer overflow in the Qualcomm components in Android before 2016-08-05 on Nexus 5, 5X, 6P, and 7 (2013) devices allows attackers to gain pr (no CVSS)
- [CVE-2014-9875](https://cve.now/CVE-2014-9875.md): drivers/char/diag/diag\_dci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain priv (no CVSS)
- [CVE-2014-9876](https://cve.now/CVE-2014-9876.md): drivers/char/diag/diagfwd.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5, 5X, 6, 6P, and 7 (2013) devices mishandles c (no CVSS)
- [CVE-2014-9877](https://cve.now/CVE-2014-9877.md): drivers/media/platform/msm/camera\_v2/sensor/actuator/msm\_actuator.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (no CVSS)
- [CVE-2014-9878](https://cve.now/CVE-2014-9878.md): drivers/mmc/card/mmc\_block\_test.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not reject kernel-space bu (no CVSS)
- [CVE-2014-9879](https://cve.now/CVE-2014-9879.md): The mdss mdp3 driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate user-space data, which all (no CVSS)
- [CVE-2014-9880](https://cve.now/CVE-2014-9880.md): drivers/video/msm/vidc/common/enc/venc.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices does not validate (no CVSS)
- [CVE-2014-9881](https://cve.now/CVE-2014-9881.md): drivers/media/radio/radio-iris.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices uses an incorrect integer (no CVSS)
- [CVE-2014-9882](https://cve.now/CVE-2014-9882.md): Buffer overflow in drivers/media/radio/radio-iris.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices allows (no CVSS)
- [CVE-2014-9883](https://cve.now/CVE-2014-9883.md): Integer overflow in drivers/char/diag/diag\_dci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices all (no CVSS)
- [CVE-2014-9884](https://cve.now/CVE-2014-9884.md): drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not validate certain poi (no CVSS)
- [CVE-2014-9885](https://cve.now/CVE-2014-9885.md): Format string vulnerability in drivers/thermal/qpnp-adc-tm.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices allo (no CVSS)
- [CVE-2014-9886](https://cve.now/CVE-2014-9886.md): arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not (no CVSS)
- [CVE-2014-9887](https://cve.now/CVE-2014-9887.md): drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not validate certain len (no CVSS)
- [CVE-2014-9888](https://cve.now/CVE-2014-9888.md): arch/arm/mm/dma-mapping.c in the Linux kernel before 3.13 on ARM platforms, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) dev (no CVSS)
- [CVE-2014-9889](https://cve.now/CVE-2014-9889.md): drivers/media/platform/msm/camera\_v2/pproc/cpp/msm\_cpp.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not (no CVSS)
- [CVE-2014-9890](https://cve.now/CVE-2014-9890.md): Off-by-one error in drivers/media/platform/msm/camera\_v2/sensor/cci/msm\_cci.c in the Qualcomm components in Android before 2016-08-05 on Nex (no CVSS)
- [CVE-2014-9891](https://cve.now/CVE-2014-9891.md): drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate certain buffer addresses (no CVSS)
- [CVE-2014-9892](https://cve.now/CVE-2014-9892.md): The snd\_compr\_tstamp function in sound/core/compress\_offload.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexu (no CVSS)
- [CVE-2014-9893](https://cve.now/CVE-2014-9893.md): drivers/video/msm/mdss/mdss\_mdp\_pp.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not properly determine (no CVSS)
- [CVE-2014-9894](https://cve.now/CVE-2014-9894.md): drivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices does not ensure that certain name s (no CVSS)
- [CVE-2014-9895](https://cve.now/CVE-2014-9895.md): drivers/media/media-device.c in the Linux kernel before 3.11, as used in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices, does not (no CVSS)
- [CVE-2014-9896](https://cve.now/CVE-2014-9896.md): drivers/char/adsprpc.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not properly validate pa (no CVSS)
- [CVE-2014-9897](https://cve.now/CVE-2014-9897.md): sound/soc/msm/qdsp6v2/msm-lsm-client.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not validate certain (no CVSS)
- [CVE-2014-9898](https://cve.now/CVE-2014-9898.md): arch/arm/mach-msm/qdsp6v2/ultrasound/usf.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices does not (no CVSS)
- [CVE-2014-9899](https://cve.now/CVE-2014-9899.md): drivers/usb/host/ehci-msm2.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices omits certain minimum calculations b (no CVSS)
- [CVE-2014-9900](https://cve.now/CVE-2014-9900.md): The ethtool\_get\_wol function in net/core/ethtool.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 5 and 7 (2 (no CVSS)
- [CVE-2015-8937](https://cve.now/CVE-2015-8937.md): drivers/char/diag/diagchar\_core.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5, 6, and 7 (2013) devices mishandles a s (no CVSS)
- [CVE-2015-8938](https://cve.now/CVE-2015-8938.md): The MSM camera driver in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices does not validate input parameters, which a (no CVSS)
- [CVE-2015-8939](https://cve.now/CVE-2015-8939.md): drivers/video/msm/mdp4\_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 (2013) devices does not validate r stages, (no CVSS)
- [CVE-2015-8940](https://cve.now/CVE-2015-8940.md): Integer overflow in sound/soc/msm/qdsp6v2/q6lsm.c in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices allows attacker (no CVSS)
- [CVE-2015-8941](https://cve.now/CVE-2015-8941.md): drivers/media/platform/msm/camera\_v2/isp/msm\_isp\_axi\_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 6 and 7 (2013) (no CVSS)
- [CVE-2015-8942](https://cve.now/CVE-2015-8942.md): drivers/media/platform/msm/camera\_v2/pproc/cpp/msm\_cpp.c in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices does not (no CVSS)
- [CVE-2015-8943](https://cve.now/CVE-2015-8943.md): drivers/video/msm/mdss/mdss\_mdp\_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices does not verify that a map (no CVSS)
- [CVE-2015-8944](https://cve.now/CVE-2015-8944.md): The ioresources\_init function in kernel/resource.c in the Linux kernel through 4.7, as used in Android before 2016-08-05 on Nexus 6 and 7 (2 (no CVSS)
- [CVE-2016-3854](https://cve.now/CVE-2016-3854.md): drivers/media/video/msm/msm\_mctl\_buf.c in the Qualcomm components in Android before 2016-08-05 does not validate the image mode, which allow (no CVSS)
- [CVE-2016-3855](https://cve.now/CVE-2016-3855.md): drivers/thermal/supply\_lm\_core.c in the Qualcomm components in Android before 2016-08-05 does not validate a certain count parameter, which (no CVSS)
- [CVE-2016-3856](https://cve.now/CVE-2016-3856.md): netd in Android before 2016-08-05 mishandles tethering and stdio streams, which allows attackers to cause a denial of service or possibly ha (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-08-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.