CVE List

Id CVE No. Status Description Phase Votes Comments Actions
87587  CVE-2016-10088  Candidate  The sg implementation in the Linux kernel through 4.9 does not properly restrict write operations in situations where the KERNEL_DS option is set, which allows local users to read or write to arbitrary kernel memory locations or cause a denial of service (use-after-free) by leveraging access to a /dev/sg device, related to block/bsg.c and drivers/scsi/sg.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9576.  Assigned (20161230)  None (candidate not yet proposed)    View
87588  CVE-2016-10089  Candidate  Nagios 4.2.4 and earlier allows local users to gain root privileges via a hard link attack on the Nagios init script file, related to CVE-2016-8641.  Assigned (20161230)  None (candidate not yet proposed)    View
87590  CVE-2016-10090  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20161231)  None (candidate not yet proposed)    View
87591  CVE-2016-10091  Candidate  ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.  Assigned (20161231)  None (candidate not yet proposed)    View
87592  CVE-2016-10092  Candidate  Heap-based buffer overflow in the readContigStripsIntoBuffer function in tif_unix.c in LibTIFF 4.0.7 allows remote attackers to have unspecified impact via a crafted image.  Assigned (20170101)  None (candidate not yet proposed)    View

Page 19718 of 20943, showing 5 records out of 104715 total, starting on record 98586, ending on 98590

Actions