# CVEs published 2016-10-16

14 CVEs were published on October 16, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-3288](https://cve.now/CVE-2015-3288.md): mm/memory.c in the Linux kernel before 4.1.4 mishandles anonymous pages, which allows local users to gain privileges or cause a denial of se (no CVSS)
- [CVE-2015-8952](https://cve.now/CVE-2015-8952.md): The mbcache feature in the ext2 and ext4 filesystem implementations in the Linux kernel before 4.6 mishandles xattr block caching, which all (no CVSS)
- [CVE-2015-8953](https://cve.now/CVE-2015-8953.md): fs/overlayfs/copy\_up.c in the Linux kernel before 4.2.6 uses an incorrect cleanup code path, which allows local users to cause a denial of s (no CVSS)
- [CVE-2016-0204](https://cve.now/CVE-2016-0204.md): Open redirect vulnerability in IBM Cloud Orchestrator 2.4.x before 2.4.0 FP3 allows remote authenticated users to redirect users to arbitrar (no CVSS)
- [CVE-2016-0249](https://cve.now/CVE-2016-0249.md): SQL injection vulnerability in IBM Security Guardium Database Activity Monitor 8.2 before p310, 9.x through 9.5 before p700, and 10.x throug (no CVSS)
- [CVE-2016-6327](https://cve.now/CVE-2016-6327.md): drivers/infiniband/ulp/srpt/ib\_srpt.c in the Linux kernel before 4.5.1 allows local users to cause a denial of service (NULL pointer derefer (no CVSS)
- [CVE-2016-6828](https://cve.now/CVE-2016-6828.md): The tcp\_check\_send\_head function in include/net/tcp.h in the Linux kernel before 4.7.5 does not properly maintain certain SACK state after a (no CVSS)
- [CVE-2016-7039](https://cve.now/CVE-2016-7039.md): The IP stack in the Linux kernel through 4.8.2 allows remote attackers to cause a denial of service (stack consumption and panic) or possibl (no CVSS)
- [CVE-2016-7042](https://cve.now/CVE-2016-7042.md): The proc\_keys\_show function in security/keys/proc.c in the Linux kernel through 4.8.2, when the GNU Compiler Collection (gcc) stack protecto (no CVSS)
- [CVE-2016-7097](https://cve.now/CVE-2016-7097.md): The filesystem implementation in the Linux kernel through 4.8.2 preserves the setgid bit during a setxattr call, which allows local users to (no CVSS)
- [CVE-2016-7425](https://cve.now/CVE-2016-7425.md): The arcmsr\_iop\_message\_xfer function in drivers/scsi/arcmsr/arcmsr\_hba.c in the Linux kernel through 4.8.2 does not restrict a certain lengt (no CVSS)
- [CVE-2016-8658](https://cve.now/CVE-2016-8658.md): Stack-based buffer overflow in the brcmf\_cfg80211\_start\_ap function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Li (no CVSS)
- [CVE-2016-8660](https://cve.now/CVE-2016-8660.md): The XFS subsystem in the Linux kernel through 4.8.2 allows local users to cause a denial of service (fdatasync failure and system hang) by u (no CVSS)
- [CVE-2016-8666](https://cve.now/CVE-2016-8666.md): The IP stack in the Linux kernel before 4.6 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly h (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-10-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.