# CVEs published 2016-12-08

13 CVEs were published on December 8, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-8966](https://cve.now/CVE-2015-8966.md): arch/arm/kernel/sys\_oabi-compat.c in the Linux kernel before 4.4 allows local users to gain privileges via a crafted (1) F\_OFD\_GETLK, (2) F\_ (no CVSS)
- [CVE-2015-8967](https://cve.now/CVE-2015-8967.md): arch/arm64/kernel/sys.c in the Linux kernel before 4.0 allows local users to bypass the "strict page permissions" protection mechanism and m (no CVSS)
- [CVE-2016-9120](https://cve.now/CVE-2016-9120.md): Race condition in the ion\_ioctl function in drivers/staging/android/ion/ion.c in the Linux kernel before 4.6 allows local users to gain priv (no CVSS)
- [CVE-2016-9920](https://cve.now/CVE-2016-9920.md): steps/mail/sendmail.inc in Roundcube before 1.1.7 and 1.2.x before 1.2.3, when no SMTP server is configured and the sendmail program is enab (no CVSS)
- [CVE-2016-8102](https://cve.now/CVE-2016-8102.md): Unquoted service path vulnerability in Intel Wireless Bluetooth Drivers 16.x, 17.x, and before 18.1.1607.3129 allows local users to launch p (no CVSS, Intel Wireless Bluetooth Drivers)
- [CVE-2016-8103](https://cve.now/CVE-2016-8103.md): SMM call out in all Intel Branded NUC Kits allows a local privileged user to access the System Management Mode and take full control of the (no CVSS, Intel NUC Kits)
- [CVE-2016-8104](https://cve.now/CVE-2016-8104.md): Buffer overflow in Intel PROSet/Wireless Software and Drivers in versions before 19.20.3 allows a local user to crash iframewrk.exe causing (no CVSS, Intel PROSet/Wireless Software and Drivers)
- [CVE-2016-9919](https://cve.now/CVE-2016-9919.md): The icmp6\_send function in net/ipv6/icmp.c in the Linux kernel through 4.8.12 omits a certain check of the dst data structure, which allows (no CVSS)
- [CVE-2016-8655](https://cve.now/CVE-2016-8655.md): Race condition in net/packet/af\_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cause a denial of servi (no CVSS)
- [CVE-2016-9839](https://cve.now/CVE-2016-9839.md): In MapServer before 7.0.3, OGR driver error messages are too verbose and may leak sensitive information if data connection fails. (no CVSS)
- [CVE-2016-9888](https://cve.now/CVE-2016-9888.md): An error within the "tar\_directory\_for\_file()" function (gsf-infile-tar.c) in GNOME Structured File Library before 1.14.41 can be exploited (no CVSS)
- [CVE-2016-9917](https://cve.now/CVE-2016-9917.md): In BlueZ 5.42, a buffer overflow was observed in "read\_n" function in "tools/hcidump.c" source file. (no CVSS)
- [CVE-2016-9918](https://cve.now/CVE-2016-9918.md): In BlueZ 5.42, an out-of-bounds read was identified in "packet\_hexdump" function in "monitor/packet.c" source file. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-12-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.