Security Vulnerabilities - CVEs Published In October 2016
arch/arm64/kernel/perf_event.c in the Linux kernel before 4.1 on arm64 platforms allows local users to gain privileges or cause a denial of service (invalid pointer dereference) via vectors involving events that are mishandled during a span of multiple HW PMUs.
CVSS Score
7.3
EPSS Score
0.001
Published
2016-10-10
Multiple use-after-free vulnerabilities in sound/soc/msm/qdsp6v2/msm-lsm-client.c in the Qualcomm sound driver in Android before 2016-10-05 on Nexus 5X, Nexus 6P, and Android One devices allow attackers to gain privileges via a crafted application, aka Android internal bug 30142668 and Qualcomm internal bug CR 948902.
CVSS Score
7.8
EPSS Score
0.001
Published
2016-10-10
arch/arm64/mm/dma-mapping.c in the Linux kernel before 4.0.3, as used in the ION subsystem in Android and other products, does not initialize certain data structures, which allows local users to obtain sensitive information from kernel memory by triggering a dma_mmap call.
CVSS Score
5.5
EPSS Score
0.001
Published
2016-10-10
Multiple race conditions in drivers/char/adsprpc.c and drivers/char/adsprpc_compat.c in the ADSPRPC driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to cause a denial of service (zero-value write) or possibly have unspecified other impact via a COMPAT_FASTRPC_IOCTL_INVOKE_FD ioctl call.
CVSS Score
7.0
EPSS Score
0.001
Published
2016-10-10
Pagure 2.2.1 XSS in raw file endpoint
CVSS Score
6.1
EPSS Score
0.002
Published
2016-10-07
Mirror Manager version 0.7.2 and older is vulnerable to remote code execution in the checkin code.
CVSS Score
9.8
EPSS Score
0.026
Published
2016-10-07
flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect
CVSS Score
7.4
EPSS Score
0.002
Published
2016-10-07
Xen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest OS users to read or modify FPU, MMX, or XMM register state information belonging to arbitrary tasks on the guest by modifying an instruction while the hypervisor is preparing to emulate it.
CVSS Score
6.3
EPSS Score
0.001
Published
2016-10-07
The put_no_rnd_pixels8_xy2_mmx function in x86/rnd_template.c in libav 11.7 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted MP3 file.
CVSS Score
5.5
EPSS Score
0.002
Published
2016-10-07
Multiple integer overflows in the (1) curl_escape, (2) curl_easy_escape, (3) curl_unescape, and (4) curl_easy_unescape functions in libcurl before 7.50.3 allow attackers to have unspecified impact via a string of length 0xffffffff, which triggers a heap-based buffer overflow.
CVSS Score
9.8
EPSS Score
0.022
Published
2016-10-07