CVEs published December 8, 2016
13 CVEs were published on December 8, 2016: 0 critical, 0 high.
- Published
- 13
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 13
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Intel NUC Kits
- 1
- Intel PROSet/Wireless Software and Drivers
- 1
- Intel Wireless Bluetooth Drivers
- 1
Medium, low and unrated 13
- CVE-2015-8966arch/arm/kernel/sys_oabi-compat.c in the Linux kernel before 4.4 allows local users to gain privileges via a crafted (1) F_OFD_GETLK, (2) F_
- CVE-2015-8967arch/arm64/kernel/sys.c in the Linux kernel before 4.0 allows local users to bypass the "strict page permissions" protection mechanism and m
- CVE-2016-9120Race condition in the ion_ioctl function in drivers/staging/android/ion/ion.c in the Linux kernel before 4.6 allows local users to gain priv
- CVE-2016-9920steps/mail/sendmail.inc in Roundcube before 1.1.7 and 1.2.x before 1.2.3, when no SMTP server is configured and the sendmail program is enab
- CVE-2016-8102Unquoted service path vulnerability in Intel Wireless Bluetooth Drivers 16.x, 17.x, and before 18.1.1607.3129 allows local users to launch pIntel Wireless Bluetooth Drivers
- CVE-2016-8103SMM call out in all Intel Branded NUC Kits allows a local privileged user to access the System Management Mode and take full control of the Intel NUC Kits
- CVE-2016-8104Buffer overflow in Intel PROSet/Wireless Software and Drivers in versions before 19.20.3 allows a local user to crash iframewrk.exe causing Intel PROSet/Wireless Software and Drivers
- CVE-2016-9919The icmp6_send function in net/ipv6/icmp.c in the Linux kernel through 4.8.12 omits a certain check of the dst data structure, which allows
- CVE-2016-8655Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of servi
- CVE-2016-9839In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails.
- CVE-2016-9888An error within the "tar_directory_for_file()" function (gsf-infile-tar.c) in GNOME Structured File Library before 1.14.41 can be exploited
- CVE-2016-9917In BlueZ 5.42, a buffer overflow was observed in "read_n" function in "tools/hcidump.c" source file.
- CVE-2016-9918In BlueZ 5.42, an out-of-bounds read was identified in "packet_hexdump" function in "monitor/packet.c" source file.