CVEs published December 22, 2016
6 CVEs were published on December 22, 2016: 0 critical, 0 high.
- Published
- 6
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 6
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- bundler
- 1
Medium, low and unrated 6
- CVE-2016-7954Bundler 1.x might allow remote attackers to inject arbitrary Ruby code into an application by leveraging a gem name collision on a secondarybundler
- CVE-2016-7091sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves t
- CVE-2016-9179lynx: It was found that Lynx doesn't parse the authority component of the URL correctly when the host name part ends with '?', and could ins
- CVE-2016-9180perl-XML-Twig: The option to `expand_external_ents`, documented as controlling external entity expansion in XML::Twig does not work.
- CVE-2016-9181perl-Image-Info: When parsing an SVG file, external entity expansion (XXE) was not disabled.
- CVE-2016-9675openjpeg: A heap-based buffer overflow flaw was found in the patch for CVE-2013-6045.