Provide references for further information: Can you share references or external links related to CVE-2016-1541?

{'name': 'DSA-3574', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3574'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/libarchive/libarchive/commit/d0331e8e5b05b475f20b1f3101fe1ad772d7e7e7'}, {'name': 'USN-2981-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2981-1'}, {'name': 'RHSA-2016:1844', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-1844.html'}, {'name': 'openSUSE-SU-2016:1463', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-06/msg00003.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/libarchive/libarchive/issues/656'}, {'name': 'openSUSE-SU-2016:1663', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-06/msg00090.html'}, {'name': '89355', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/89355'}, {'name': 'SSA:2016-145-01', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.352685'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjul2016-3090568.html'}, {'name': 'GLSA-201701-03', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201701-03'}, {'name': 'VU#862384', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/862384'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1541?


Explain the CVE ID: What does the identifier CVE-2016-1542 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1542.

The RPC API in RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and enumerate users by sending an action packet to xmlrpc after an authorization failure.


Provide references for further information: Can you share references or external links related to CVE-2016-1542?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/136461/BMC-Server-Automation-BSA-RSCD-Agent-User-Enumeration.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.insinuator.net/2016/03/bmc-bladelogic-cve-2016-1542-and-cve-2016-1543/'}, {'name': '20160328 BMC-2015-0010: User enumeration vulnerability in BMC Server Automation (BSA) Unix/Linux RSCD Agent (CVE-2016-1542)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/537909/100/0/threaded'}, {'name': '43902', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/43902/'}, {'name': '43939', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/43939/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://selfservice.bmc.com/casemgmt/sc_KnowledgeArticle?sfdcid=kA214000000dBpnCAE&type=Solution'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1542?


Explain the CVE ID: What does the identifier CVE-2016-1543 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1543.

The RPC API in the RSCD agent in BMC BladeLogic Server Automation (BSA) 8.2.x, 8.3.x, 8.5.x, 8.6.x, and 8.7.x on Linux and UNIX allows remote attackers to bypass authorization and reset arbitrary user passwords by sending an action packet to xmlrpc after an authorization failure.


Provide references for further information: Can you share references or external links related to CVE-2016-1543?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.insinuator.net/2016/03/bmc-bladelogic-cve-2016-1542-and-cve-2016-1543/'}, {'name': '20160328 BMC-2015-0011: Unauthorized password reset vulnerability in BMC Server Automation (BSA) (CVE-2016-1543)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/537910/100/0/threaded'}, {'name': '43902', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/43902/'}, {'name': '43939', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/43939/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/136462/BMC-Server-Automation-BSA-RSCD-Agent-Unauthorized-Password-Reset.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://selfservice.bmc.com/casemgmt/sc_KnowledgeArticle?sfdcid=kA214000000dBpnCAE&type=Solution'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1543?


Explain the CVE ID: What does the identifier CVE-2016-1544 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1544.

nghttp2 before 1.7.1 allows remote attackers to cause a denial of service (memory exhaustion).


Provide references for further information: Can you share references or external links related to CVE-2016-1544?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1308461'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/nghttp2/nghttp2/releases/tag/v1.7.1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/nghttp2/nghttp2/compare/v1.7.0...v1.7.1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.gentoo.org/glsa/201612-13'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177666.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177308.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1544?


Explain the CVE ID: What does the identifier CVE-2016-1546 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1546.

The Apache HTTP Server 2.4.17 and 2.4.18, when mod_http2 is enabled, does not limit the number of simultaneous stream workers for a single HTTP/2 connection, which allows remote attackers to cause a denial of service (stream-processing outage) via modified flow-control windows.


Provide references for further information: Can you share references or external links related to CVE-2016-1546?

{'name': '92331', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/92331'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://httpd.apache.org/security/vulnerabilities_24.html'}, {'name': 'GLSA-201610-02', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201610-02'}, {'name': 'RHSA-2017:1161', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2017:1161'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.apache.org/dist/httpd/CHANGES_2.4'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.apache.org/viewvc?view=revision&revision=1733727'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20180601-0001/'}, {'name': '[httpd-cvs] 20190815 svn commit: r1048743 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/56c2e7cc9deb1c12a843d0dc251ea7fd3e7e80293cde02fcd65286ba%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20190815 svn commit: r1048742 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/84a3714f0878781f6ed84473d1a503d2cc382277e100450209231830%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20200401 svn commit: r1058586 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20200401 svn commit: r1058587 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073140 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rc998b18880df98bafaade071346690c2bc1444adaa1a1ea464b93f0a%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1888194 [10/13] - /httpd/site/trunk/content/security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/re1e3a24664d35bcd0a0e793e0b5fc6ca6c107f99a1b2c545c5d4b467%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073139 [10/13] - in /websites/staging/httpd/trunk/content: ./ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r04e89e873d54116a0635ef2f7061c15acc5ed27ef7500997beb65d6f%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073146 [3/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rcc44594d4d6579b90deccd4536b5d31f099ef563df39b094be286b9e%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210330 svn commit: r1073149 [10/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rb14daf9cc4e28d18cdc15d6a6ca74e565672fabf7ad89541071d008b%40%3Ccvs.httpd.apache.org%3E'}, {'name': '[httpd-cvs] 20210606 svn commit: r1075470 [4/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1546?


Explain the CVE ID: What does the identifier CVE-2016-1547 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1547.

An off-path attacker can cause a preemptible client association to be demobilized in NTP 4.2.8p4 and earlier and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 by sending a crypto NAK packet to a victim client with a spoofed source address of an existing associated peer. This is true even if authentication is enabled.


Provide references for further information: Can you share references or external links related to CVE-2016-1547?

{'name': '88276', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/88276'}, {'name': 'DSA-3629', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3629'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html'}, {'name': 'RHSA-2016:1141', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1141'}, {'name': 'RHSA-2016:1552', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-1552.html'}, {'name': '1035705', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035705'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20171004-0002/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.talosintelligence.com/reports/TALOS-2016-0081/'}, {'name': 'FreeBSD-SA-16:16', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'https://security.FreeBSD.org/advisories/FreeBSD-SA-16:16.ntp.asc'}, {'name': 'GLSA-201607-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201607-15'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.arista.com/en/support/advisories-notices/security-advisories/1332-security-advisory-19'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1547?


Explain the CVE ID: What does the identifier CVE-2016-1548 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1548.

An attacker can spoof a packet from a legitimate ntpd server with an origin timestamp that matches the peer->dst timestamp recorded for that server. After making this switch, the client in NTP 4.2.8p4 and earlier and NTPSec aa48d001683e5b791a743ec9c575aaf7d867a2b0c will reject all future legitimate server responses. It is possible to force the victim client to move time after the mode has been changed. ntpq gives no indication that the mode has been switched.


Provide references for further information: Can you share references or external links related to CVE-2016-1548?

{'name': 'USN-3096-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-3096-1'}, {'name': 'DSA-3629', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3629'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.talosintelligence.com/reports/TALOS-2016-0082/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html'}, {'name': 'RHSA-2016:1141', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1141'}, {'name': 'SUSE-SU-2016:1912', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html'}, {'name': '88264', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/88264'}, {'name': 'VU#718152', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'https://www.kb.cert.org/vuls/id/718152'}, {'name': 'RHSA-2016:1552', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-1552.html'}, {'name': '1035705', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035705'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20171004-0002/'}, {'name': '20160428 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: April 2016', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-ntpd'}, {'name': 'FreeBSD-SA-16:16', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'https://security.FreeBSD.org/advisories/FreeBSD-SA-16:16.ntp.asc'}, {'name': 'SUSE-SU-2016:2094', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html'}, {'name': 'openSUSE-SU-2016:1423', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html'}, {'name': 'GLSA-201607-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201607-15'}, {'name': 'openSUSE-SU-2016:1329', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/136864/Slackware-Security-Advisory-ntp-Updates.html'}, {'name': 'SUSE-SU-2016:1471', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0082'}, {'name': 'FEDORA-2016-5b2eb0bf9c', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184669.html'}, {'name': 'SUSE-SU-2016:1291', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html'}, {'name': 'DSA-3629', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2016/dsa-3629'}, {'name': '20160429 [slackware-security] ntp (SSA:2016-120-01)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/538233/100/0/threaded'}, {'name': 'SUSE-SU-2016:1568', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html'}, {'name': '20160429 [slackware-security] ntp (SSA:2016-120-01)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/archive/1/538233/100/0/threaded'}, {'name': 'SUSE-SU-2016:1278', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html'}, {'name': 'FEDORA-2016-ed8c6c0426', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183647.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf'}, {'tags': ['x_refsource_MISC'], 'url': 'https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf'}, {'tags': ['x_refsource_MISC'], 'url': 'https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.arista.com/en/support/advisories-notices/security-advisories/1332-security-advisory-19'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1548?


Explain the CVE ID: What does the identifier CVE-2016-1549 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1549.

A malicious authenticated peer can create arbitrarily-many ephemeral associations in order to win the clock selection algorithm in ntpd in NTP 4.2.8p4 and earlier and NTPsec 3e160db8dc248a0bcb053b56a80167dc742d2b74 and a5fb34b9cc89b92a8fef2f459004865c93bb7f92 and modify a victim's clock.


Provide references for further information: Can you share references or external links related to CVE-2016-1549?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.talosintelligence.com/reports/TALOS-2016-0083/'}, {'name': '88200', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/88200'}, {'name': '1035705', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035705'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20171004-0002/'}, {'name': 'FreeBSD-SA-16:16', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'https://security.FreeBSD.org/advisories/FreeBSD-SA-16:16.ntp.asc'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.synology.com/support/security/Synology_SA_18_13'}, {'name': 'GLSA-201607-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201607-15'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03962en_us'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1549?


Explain the CVE ID: What does the identifier CVE-2016-1550 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1550.

An exploitable vulnerability exists in the message authentication functionality of libntp in ntp 4.2.8p4 and NTPSec a5fb34b9cc89b92a8fef2f459004865c93bb7f92. An attacker can send a series of crafted messages to attempt to recover the message digest key.


Provide references for further information: Can you share references or external links related to CVE-2016-1550?

{'name': 'USN-3096-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-3096-1'}, {'name': 'DSA-3629', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3629'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html'}, {'name': 'RHSA-2016:1141', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2016:1141'}, {'name': 'SUSE-SU-2016:1912', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00026.html'}, {'name': 'VU#718152', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'https://www.kb.cert.org/vuls/id/718152'}, {'name': 'RHSA-2016:1552', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-1552.html'}, {'name': '1035705', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035705'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20171004-0002/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.talosintelligence.com/reports/TALOS-2016-0084/'}, {'name': '20160428 Multiple Vulnerabilities in Network Time Protocol Daemon Affecting Cisco Products: April 2016', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-ntpd'}, {'name': 'FreeBSD-SA-16:16', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'https://security.FreeBSD.org/advisories/FreeBSD-SA-16:16.ntp.asc'}, {'name': '88261', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/88261'}, {'name': 'SUSE-SU-2016:2094', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00042.html'}, {'name': 'openSUSE-SU-2016:1423', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-05/msg00114.html'}, {'name': 'GLSA-201607-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201607-15'}, {'name': 'openSUSE-SU-2016:1329', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00052.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/136864/Slackware-Security-Advisory-ntp-Updates.html'}, {'name': 'SUSE-SU-2016:1471', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00001.html'}, {'name': 'FEDORA-2016-5b2eb0bf9c', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184669.html'}, {'name': 'SUSE-SU-2016:1291', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00037.html'}, {'name': 'DSA-3629', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'https://www.debian.org/security/2016/dsa-3629'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.talosintelligence.com/vulnerability_reports/TALOS-2016-0084'}, {'name': '20160429 [slackware-security] ntp (SSA:2016-120-01)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/538233/100/0/threaded'}, {'name': 'SUSE-SU-2016:1568', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00020.html'}, {'name': '20160429 [slackware-security] ntp (SSA:2016-120-01)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/archive/1/538233/100/0/threaded'}, {'name': 'SUSE-SU-2016:1278', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00034.html'}, {'name': 'FEDORA-2016-ed8c6c0426', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183647.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-497656.pdf'}, {'tags': ['x_refsource_MISC'], 'url': 'https://us-cert.cisa.gov/ics/advisories/icsa-21-103-11'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-211752.pdf'}, {'tags': ['x_refsource_MISC'], 'url': 'https://us-cert.cisa.gov/ics/advisories/icsa-21-159-11'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.arista.com/en/support/advisories-notices/security-advisories/1332-security-advisory-19'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1550?


Explain the CVE ID: What does the identifier CVE-2016-1551 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1551.

ntpd in NTP 4.2.8p3 and NTPsec a5fb34b9cc89b92a8fef2f459004865c93bb7f92 relies on the underlying operating system to protect it from requests that impersonate reference clocks. Because reference clocks are treated like other peers and stored in the same structure, any packet with a source ip address of a reference clock (127.127.1.1 for example) that reaches the receive() function will match that reference clock's peer record and will be treated as a trusted peer. Any system that lacks the typical martian packet filtering which would block these packets is in danger of having its time controlled by an attacker.


Provide references for further information: Can you share references or external links related to CVE-2016-1551?

{'name': '88219', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/88219'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.talosintelligence.com/reports/TALOS-2016-0132/'}, {'name': '1035705', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035705'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20171004-0002/'}, {'name': 'FreeBSD-SA-16:16', 'tags': ['vendor-advisory', 'x_refsource_FREEBSD'], 'url': 'https://security.FreeBSD.org/advisories/FreeBSD-SA-16:16.ntp.asc'}, {'name': 'GLSA-201607-15', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201607-15'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1551?


Explain the CVE ID: What does the identifier CVE-2016-1555 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1555.

(1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5) boardDataWW.php in Netgear WN604 before 3.3.3 and WN802Tv2, WNAP210v2, WNAP320, WNDAP350, WNDAP360, and WNDAP660 before 3.5.5.0 allow remote attackers to execute arbitrary commands.


Provide references for further information: Can you share references or external links related to CVE-2016-1555?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.netgear.com/30480/CVE-2016-1555-Notification?cid=wmt_netgear_organic'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html'}, {'name': '45909', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/45909/'}, {'name': '20160225 D-Link, Netgear Router Vulnerabiltiies', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2016/Feb/112'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1555?


Explain the CVE ID: What does the identifier CVE-2016-1556 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1556.

Information disclosure in Netgear WN604 before 3.3.3; WNAP210, WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0; and WND930 before 2.0.11 allows remote attackers to read the wireless WPS PIN or passphrase by visiting unauthenticated webpages.


Provide references for further information: Can you share references or external links related to CVE-2016-1556?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.netgear.com/30481/CVE-2016-1556-Notification?cid=wmt_netgear_organic'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html'}, {'name': '20160225 D-Link, Netgear Router Vulnerabiltiies', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2016/Feb/112'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1556?


Explain the CVE ID: What does the identifier CVE-2016-1557 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1557.

Netgear WNAP320, WNDAP350, and WNDAP360 before 3.5.5.0 reveal wireless passwords and administrative usernames and passwords over SNMP.


Provide references for further information: Can you share references or external links related to CVE-2016-1557?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.netgear.com/30482/CVE-2016-1557-Notification?cid=wmt_netgear_organic'}, {'name': '20160225 D-Link, Netgear Router Vulnerabiltiies', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2016/Feb/112'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1557?


Explain the CVE ID: What does the identifier CVE-2016-1558 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1558.

Buffer overflow in D-Link DAP-2310 2.06 and earlier, DAP-2330 1.06 and earlier, DAP-2360 2.06 and earlier, DAP-2553 H/W ver. B1 3.05 and earlier, DAP-2660 1.11 and earlier, DAP-2690 3.15 and earlier, DAP-2695 1.16 and earlier, DAP-3320 1.00 and earlier, and DAP-3662 1.01 and earlier allows remote attackers to have unspecified impact via a crafted 'dlink_uid' cookie.


Provide references for further information: Can you share references or external links related to CVE-2016-1558?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.dlink.com/mk/mk/support/support-news/2016/march/16/firmadyne-cve_2016_1558-cve_2016_1559'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/135956/D-Link-Netgear-FIRMADYNE-Command-Injection-Buffer-Overflow.html'}, {'name': '20160225 D-Link, Netgear Router Vulnerabiltiies', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2016/Feb/112'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1558?


Explain the CVE ID: What does the identifier CVE-2016-1559 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1559.

D-Link DAP-1353 H/W vers. B1 3.15 and earlier, D-Link DAP-2553 H/W ver. A1 1.31 and earlier, and D-Link DAP-3520 H/W ver. A1 1.16 and earlier reveal wireless passwords and administrative usernames and passwords over SNMP.


Provide references for further information: Can you share references or external links related to CVE-2016-1559?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1559?


Explain the CVE ID: What does the identifier CVE-2016-1560 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1560.

ExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection for the root shell account and (2) support for the support account in the web interface, which allows remote attackers to obtain administrative access via an SSH or HTTP session.


Provide references for further information: Can you share references or external links related to CVE-2016-1560?

{'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/136634/ExaGrid-Known-SSH-Key-Default-Password.html'}, {'tags': ['x_refsource_MISC'], 'url': 'https://community.rapid7.com/community/infosec/blog/2016/04/07/r7-2016-04-exagrid-backdoor-ssh-keys-and-hardcoded-credentials'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.rapid7.com/db/modules/exploit/linux/ssh/exagrid_known_privkey'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1560?


Explain the CVE ID: What does the identifier CVE-2016-1561 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1561.

ExaGrid appliances with firmware before 4.8 P26 have a default SSH public key in the authorized_keys file for root, which allows remote attackers to obtain SSH access by leveraging knowledge of a private key from another installation or a firmware image.


Provide references for further information: Can you share references or external links related to CVE-2016-1561?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1561?


Explain the CVE ID: What does the identifier CVE-2016-1562 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1562.

The REST API in the DTE Energy Insight application before 1.7.8 for Android allows remote authenticated users to obtain unspecified customer information via a SQL expression in the filter parameter.


Provide references for further information: Can you share references or external links related to CVE-2016-1562?

{'tags': ['x_refsource_MISC'], 'url': 'http://jeffq.com/blog/dteenergy-insight/'}, {'name': 'VU#713312', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/713312'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1562?


Explain the CVE ID: What does the identifier CVE-2016-1563 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1563.

NetApp Clustered Data ONTAP 8.3.1 does not properly verify X.509 certificates from TLS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.


Provide references for further information: Can you share references or external links related to CVE-2016-1563?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://kb.netapp.com/support/index?page=content&id=9010064'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://security.netapp.com/advisory/ntap-20160310-0002/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1563?


Explain the CVE ID: What does the identifier CVE-2016-1564 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1564.

Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/class-wp-theme.php in WordPress before 4.4.1 allow remote attackers to inject arbitrary web script or HTML via a (1) stylesheet name or (2) template name to wp-admin/customize.php.


Provide references for further information: Can you share references or external links related to CVE-2016-1564?

{'name': '1034622', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034622'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://codex.wordpress.org/Version_4.4.1'}, {'name': 'DSA-3444', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3444'}, {'name': '[oss-security] 20160108 Re: CVE Request: WordPress: cross-site scripting vulnerability fixed in new 4.4.1 release', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/01/08/4'}, {'tags': ['x_refsource_MISC'], 'url': 'http://twitter.com/brutelogic/statuses/685105483397619713'}, {'tags': ['x_refsource_MISC'], 'url': 'https://wpvulndb.com/vulnerabilities/8358'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://wordpress.org/news/2016/01/wordpress-4-4-1-security-and-maintenance-release/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://core.trac.wordpress.org/changeset/36185'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1564?


Explain the CVE ID: What does the identifier CVE-2016-1565 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1565.

Cross-site scripting (XSS) vulnerability in the Field Group module 7.x-1.x before 7.x-1.5 for Drupal allows remote authenticated users with permission to configure field display settings to inject arbitrary web script or HTML via an element attribute.


Provide references for further information: Can you share references or external links related to CVE-2016-1565?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.drupal.org/node/2644832'}, {'tags': ['x_refsource_MISC'], 'url': 'https://www.drupal.org/node/2645350'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1565?


Explain the CVE ID: What does the identifier CVE-2016-1566 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1566.

Cross-site scripting (XSS) vulnerability in the file browser in Guacamole 0.9.8 and 0.9.9, when file transfer is enabled to a location shared by multiple users, allows remote authenticated users to inject arbitrary web script or HTML via a crafted filename.  NOTE: this vulnerability was fixed in guacamole.war on 2016-01-13, but the version number was not changed.


Provide references for further information: Can you share references or external links related to CVE-2016-1566?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1566?


Explain the CVE ID: What does the identifier CVE-2016-1567 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1567.

chrony before 1.31.2 and 2.x before 2.2.1 do not verify peer associations of symmetric keys when authenticating packets, which might allow remote attackers to conduct impersonation attacks via an arbitrary trusted key, aka a "skeleton key."


Provide references for further information: Can you share references or external links related to CVE-2016-1567?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.talosintel.com/reports/TALOS-2016-0071/'}, {'name': 'FEDORA-2016-6f783d1768', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176559.html'}, {'name': 'FEDORA-2016-6a0b0ab775', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175969.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://chrony.tuxfamily.org/news.html#_20_jan_2016_chrony_2_2_1_and_chrony_1_31_2_released'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1567?


Explain the CVE ID: What does the identifier CVE-2016-1568 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1568.

Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via an invalid AHCI Native Command Queuing (NCQ) AIO command.


Provide references for further information: Can you share references or external links related to CVE-2016-1568?

{'name': 'RHSA-2016:0086', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0086.html'}, {'name': '[oss-security] 20160109 Re: Qemu: ide: ahci use-after-free vulnerability in aio port commands', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/01/09/2'}, {'name': '80191', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/80191'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=4ab0359a8ae182a7ac5c99609667273167703fab'}, {'name': '1034859', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034859'}, {'name': 'DSA-3469', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3469'}, {'name': 'DSA-3470', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3470'}, {'name': 'RHSA-2016:0087', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0087.html'}, {'name': 'RHSA-2016:0084', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0084.html'}, {'name': 'DSA-3471', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3471'}, {'name': 'GLSA-201602-01', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201602-01'}, {'name': 'RHSA-2016:0088', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0088.html'}, {'name': '[oss-security] 20160109 Qemu: ide: ahci use-after-free vulnerability in aio port commands', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/01/09/1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1568?


Explain the CVE ID: What does the identifier CVE-2016-1569 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1569.

FireBird 2.5.5 allows remote authenticated users to cause a denial of service (daemon crash) by using service manager to invoke the gbak utility with an invalid parameter.


Provide references for further information: Can you share references or external links related to CVE-2016-1569?

{'name': '[oss-security] 20160110 CVE Request: FireBird RDBMS: authenticated clients crash FireBird when running gbak with invalid parameter', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/01/10/2'}, {'name': '[oss-security] 20160110 Re: CVE Request: FireBird RDBMS: authenticated clients crash FireBird when running gbak with invalid parameter', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/01/10/3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://tracker.firebirdsql.org/browse/CORE-5068'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/p/firebird/code/62783/'}, {'name': 'FEDORA-2016-bec6b9c395', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177119.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1569?


Explain the CVE ID: What does the identifier CVE-2016-1570 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1570.

The PV superpage functionality in arch/x86/mm.c in Xen 3.4.0, 3.4.1, and 4.1.x through 4.6.x allows local PV guests to obtain sensitive information, cause a denial of service, gain privileges, or have unspecified other impact via a crafted page identifier (MFN) to the (1) MMUEXT_MARK_SUPER or (2) MMUEXT_UNMARK_SUPER sub-op in the HYPERVISOR_mmuext_op hypercall or (3) unknown vectors related to page table updates.


Provide references for further information: Can you share references or external links related to CVE-2016-1570?

{'name': 'DSA-3519', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3519'}, {'name': '1034744', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034744'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://xenbits.xen.org/xsa/advisory-167.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1570?


Explain the CVE ID: What does the identifier CVE-2016-1571 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1571.

The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users to cause a denial of service (host crash) via a non-canonical guest address in an INVVPID instruction, which triggers a hypervisor bug check.


Provide references for further information: Can you share references or external links related to CVE-2016-1571?

{'name': 'DSA-3519', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3519'}, {'name': '1034745', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034745'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.citrix.com/article/CTX205496'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://xenbits.xen.org/xsa/advisory-168.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1571?


Explain the CVE ID: What does the identifier CVE-2016-1572 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1572.

mount.ecryptfs_private.c in eCryptfs-utils does not validate mount destination filesystem types, which allows local users to gain privileges by mounting over a nonstandard filesystem, as demonstrated by /proc/$pid.


Provide references for further information: Can you share references or external links related to CVE-2016-1572?

{'name': 'openSUSE-SU-2016:0239', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-01/msg00091.html'}, {'name': '1034791', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034791'}, {'name': 'openSUSE-SU-2016:0291', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-01/msg00118.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/ecryptfs/+bug/1530566'}, {'name': '[oss-security] 20160120 Security issue in eCryptfs-utils (CVE-2016-1572)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/01/20/6'}, {'name': 'openSUSE-SU-2016:0302', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-updates/2016-02/msg00004.html'}, {'name': 'USN-2876-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2876-1'}, {'name': 'FEDORA-2016-7b9a2fe987', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177396.html'}, {'name': 'DSA-3450', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3450'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bazaar.launchpad.net/~ecryptfs/ecryptfs/trunk/revision/870'}, {'name': 'FEDORA-2016-b02ad4e424', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-February/177359.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1572?


Explain the CVE ID: What does the identifier CVE-2016-1573 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1573.

Versions of Unity8 before 8.11+16.04.20160122-0ubuntu1 file plugins/Dash/CardCreator.js will execute any code found in place of a fallback image supplied by a scope.


Provide references for further information: Can you share references or external links related to CVE-2016-1573?

{'tags': ['x_refsource_MISC'], 'url': 'https://bazaar.launchpad.net/~unity-team/unity8/stable/revision/2138'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1573?


Explain the CVE ID: What does the identifier CVE-2016-1574 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1574.


Provide references for further information: Can you share references or external links related to CVE-2016-1574?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1574?


Explain the CVE ID: What does the identifier CVE-2016-1575 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1575.

The overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory.


Provide references for further information: Can you share references or external links related to CVE-2016-1575?

{'tags': ['x_refsource_MISC'], 'url': 'http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e9f57ebcba563e0cd532926cab83c92bb4d79360'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-1575.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://launchpad.net/bugs/1534961'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.halfdog.net/Security/2016/UserNamespaceOverlayfsXattrSetgidPrivilegeEscalation/'}, {'name': '[oss-security] 20160224 User Namespaces Overlayfs Xattr Setgid Privilege Escalation: Overlayfs', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/02/24/7'}, {'name': '[oss-security] 20211018 Re: CVE-2021-3847: OverlayFS - Potential Privilege Escalation using overlays copy_up', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2021/10/18/1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1575?


Explain the CVE ID: What does the identifier CVE-2016-1576 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1576.

The overlayfs implementation in the Linux kernel through 4.5.2 does not properly restrict the mount namespace, which allows local users to gain privileges by mounting an overlayfs filesystem on top of a FUSE filesystem, and then executing a crafted setuid program.


Provide references for further information: Can you share references or external links related to CVE-2016-1576?

{'tags': ['x_refsource_MISC'], 'url': 'https://launchpadlibrarian.net/235300093/0005-overlayfs-Be-more-careful-about-copying-up-sxid-file.patch'}, {'tags': ['x_refsource_MISC'], 'url': 'https://launchpadlibrarian.net/235300225/0006-overlayfs-Propogate-nosuid-from-lower-and-upper-moun.patch'}, {'tags': ['x_refsource_MISC'], 'url': 'http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e9f57ebcba563e0cd532926cab83c92bb4d79360'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/bugs/1535150'}, {'name': '[oss-security] 20160224 Overlayfs over Fuse Privilege Escalation in USERNS', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/02/24/8'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-1576.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.halfdog.net/Security/2016/OverlayfsOverFusePrivilegeEscalation/'}, {'name': '[oss-security] 20211018 Re: CVE-2021-3847: OverlayFS - Potential Privilege Escalation using overlays copy_up', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2021/10/18/1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1576?


Explain the CVE ID: What does the identifier CVE-2016-1577 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1577.

Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137.


Provide references for further information: Can you share references or external links related to CVE-2016-1577?

{'name': 'DSA-3508', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3508'}, {'name': '[oss-security] 20160303 Security issues in JasPer (CVE-2016-1577 and CVE-2016-2116)', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/03/03/12'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/ubuntu/+source/jasper/+bug/1547865'}, {'name': 'USN-2919-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2919-1'}, {'name': 'RHSA-2017:1208', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2017:1208'}, {'name': '84133', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/84133'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1577?


Explain the CVE ID: What does the identifier CVE-2016-1578 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1578.

Use-after-free vulnerability in Oxide allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via unspecified vectors, related to responding synchronously to permission requests.


Provide references for further information: Can you share references or external links related to CVE-2016-1578?

{'name': 'USN-2955-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2955-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1578?


Explain the CVE ID: What does the identifier CVE-2016-1579 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1579.

UDM provides support for running commands after a download is completed, this is currently made use of for click package installation. This functionality was not restricted to unconfined applications. Before UDM version 1.2+16.04.20160408-0ubuntu1 any confined application could make use of the UDM C++ API to run arbitrary commands in an unconfined environment as the phablet user.


Provide references for further information: Can you share references or external links related to CVE-2016-1579?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1579?


Explain the CVE ID: What does the identifier CVE-2016-1580 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1580.

The setup_snappy_os_mounts function in the ubuntu-core-launcher package before 1.0.27.1 improperly determines the mount point of bind mounts when using snaps, which might allow remote attackers to obtain sensitive information or gain privileges via a snap with a name starting with "ubuntu-core."


Provide references for further information: Can you share references or external links related to CVE-2016-1580?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugs.launchpad.net/ubuntu/+source/ubuntu-core-launcher/+bug/1576699'}, {'name': 'USN-2956-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2956-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1580?


Explain the CVE ID: What does the identifier CVE-2016-1581 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1581.

LXD before 2.0.2 uses world-readable permissions for /var/lib/lxd/zfs.img when setting up a loop based ZFS pool, which allows local users to copy and read data from arbitrary containers via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2016-1581?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://linuxcontainers.org/lxd/news/'}, {'name': 'USN-2988-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2988-1'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1581?


Explain the CVE ID: What does the identifier CVE-2016-1582 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1582.

LXD before 2.0.2 does not properly set permissions when switching an unprivileged container into privileged mode, which allows local users to access arbitrary world readable paths in the container directory via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2016-1582?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1582?


Explain the CVE ID: What does the identifier CVE-2016-1583 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1583.

The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service (stack memory consumption) via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling.


Provide references for further information: Can you share references or external links related to CVE-2016-1583?

{'name': 'USN-3006-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-3006-1'}, {'name': 'USN-3004-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-3004-1'}, {'name': 'SUSE-SU-2016:2010', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00022.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/f5364c150aa645b3d7daa21b5c0b9feaa1c9cd6d'}, {'name': 'RHSA-2016:2766', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-2766.html'}, {'name': 'USN-3001-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-3001-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.6.3'}, {'name': 'SUSE-SU-2016:1696', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00056.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f5364c150aa645b3d7daa21b5c0b9feaa1c9cd6d'}, {'name': 'SUSE-SU-2016:1994', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00008.html'}, {'name': '39992', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39992/'}, {'name': 'SUSE-SU-2016:1961', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00003.html'}, {'name': 'USN-3005-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-3005-1'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.chromium.org/p/project-zero/issues/detail?id=836'}, {'name': 'SUSE-SU-2016:1985', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00007.html'}, {'name': '91157', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/91157'}, {'name': 'openSUSE-SU-2016:2184', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00055.html'}, {'name': 'USN-2999-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2999-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2f36db71009304b3f0b95afacd8eba1f9f046b87'}, {'name': 'SUSE-SU-2016:2006', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00019.html'}, {'name': '[oss-security] 20160610 [vs-plain] Linux kernel stack overflow via ecryptfs and /proc/$pid/environ', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/06/10/8'}, {'name': 'SUSE-SU-2016:2014', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00026.html'}, {'name': 'openSUSE-SU-2016:1641', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00044.html'}, {'name': 'USN-2997-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2997-1'}, {'name': 'USN-3000-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-3000-1'}, {'tags': ['x_refsource_MISC'], 'url': 'https://github.com/torvalds/linux/commit/f0fe970df3838c202ef6c07a4c2b36838ef0a88b'}, {'name': 'DSA-3607', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3607'}, {'name': '1036763', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1036763'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/2f36db71009304b3f0b95afacd8eba1f9f046b87'}, {'name': 'USN-3002-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-3002-1'}, {'name': 'USN-2996-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2996-1'}, {'name': 'SUSE-SU-2016:1672', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00052.html'}, {'name': 'SUSE-SU-2016:2009', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00021.html'}, {'name': 'SUSE-SU-2016:1596', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00027.html'}, {'name': 'RHSA-2017:2760', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://access.redhat.com/errata/RHSA-2017:2760'}, {'name': 'SUSE-SU-2016:2005', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00018.html'}, {'name': 'SUSE-SU-2016:2007', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00020.html'}, {'name': 'USN-3007-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-3007-1'}, {'name': 'SUSE-SU-2016:2000', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00014.html'}, {'name': 'RHSA-2016:2124', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-2124.html'}, {'name': 'USN-3003-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-3003-1'}, {'name': 'SUSE-SU-2016:1995', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00009.html'}, {'name': 'SUSE-SU-2016:2105', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00044.html'}, {'name': '[oss-security] 20160622 Re: [vs-plain] Linux kernel stack overflow via ecryptfs and /proc/$pid/environ', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2016/06/22/1'}, {'name': 'SUSE-SU-2016:2002', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00016.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.redhat.com/show_bug.cgi?id=1344721'}, {'name': 'USN-2998-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2998-1'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/137560/Linux-ecryptfs-Stack-Overflow.html'}, {'name': 'USN-3008-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-3008-1'}, {'name': 'SUSE-SU-2016:1937', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-08/msg00000.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1583?


Explain the CVE ID: What does the identifier CVE-2016-1584 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1584.

In all versions of Unity8 a running but not active application on a large-screen device could talk with Maliit and consume keyboard input.


Provide references for further information: Can you share references or external links related to CVE-2016-1584?

{'tags': ['x_refsource_MISC'], 'url': 'https://bazaar.launchpad.net/~mir-team/qtmir/trunk/revision/521'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1584?


Explain the CVE ID: What does the identifier CVE-2016-1585 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1585.

In all versions of AppArmor mount rules are accidentally widened when compiled.


Provide references for further information: Can you share references or external links related to CVE-2016-1585?

{'tags': ['x_refsource_MISC'], 'url': 'https://bugs.launchpad.net/apparmor/+bug/1597017'}, {'name': '[mina-dev] 20210225 [jira] [Created] (FTPSERVER-500) Security vulnerability in common/lib/log4j-1.2.17.jar', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1585?


Explain the CVE ID: What does the identifier CVE-2016-1586 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1586.

A malicious webview could install long-lived unload handlers that re-use an incognito BrowserContext that is queued for destruction in versions of Oxide before 1.18.3.


Provide references for further information: Can you share references or external links related to CVE-2016-1586?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1586?


Explain the CVE ID: What does the identifier CVE-2016-1587 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1587.

The Snapweb interface before version 0.21.2 was exposing controls to install or remove snap packages without controlling the identity of the user, nor the origin of the connection. An attacker could have used the controls to remotely add a valid, but malicious, snap package, from the Store, potentially using system resources without permission from the legitimate administrator of the system.


Provide references for further information: Can you share references or external links related to CVE-2016-1587?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1587?


Explain the CVE ID: What does the identifier CVE-2016-1588 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1588.


Provide references for further information: Can you share references or external links related to CVE-2016-1588?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1588?


Explain the CVE ID: What does the identifier CVE-2016-1589 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1589.


Provide references for further information: Can you share references or external links related to CVE-2016-1589?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1589?


Explain the CVE ID: What does the identifier CVE-2016-1590 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1590.


Provide references for further information: Can you share references or external links related to CVE-2016-1590?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1590?


Explain the CVE ID: What does the identifier CVE-2016-1591 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1591.


Provide references for further information: Can you share references or external links related to CVE-2016-1591?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1591?


Explain the CVE ID: What does the identifier CVE-2016-1592 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1592.

XSS in NetIQ Designer for Identity Manager before 4.5.3 allows remote attackers to inject arbitrary HTML code via the nrfEntitlementReport.do CGI.


Provide references for further information: Can you share references or external links related to CVE-2016-1592?

{'name': '93973', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/93973'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://download.novell.com/Download?buildid=QgHXVOxv310~'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1592?


Explain the CVE ID: What does the identifier CVE-2016-1593 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1593.

Directory traversal vulnerability in the import users feature in Micro Focus Novell Service Desk before 7.2 allows remote authenticated administrators to upload and execute arbitrary JSP files via a .. (dot dot) in a filename within a multipart/form-data POST request to a LiveTime.woa URL.


Provide references for further information: Can you share references or external links related to CVE-2016-1593?

{'tags': ['x_refsource_MISC'], 'url': 'https://raw.githubusercontent.com/pedrib/PoC/master/advisories/novell-service-desk-7.1.0.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'https://packetstormsecurity.com/files/136646'}, {'name': '20160410 [Multiple CVE]: RCE, info disclosure, HQL injection and stored XSS in Novell Service Desk 7.1.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/538043/100/0/threaded'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.novell.com/support/kb/doc.php?id=7017428'}, {'name': '39708', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39708/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.rapid7.com/db/modules/exploit/multi/http/novell_servicedesk_rce'}, {'name': '39687', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39687/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/136717/Novell-ServiceDesk-Authenticated-File-Upload.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1593?


Explain the CVE ID: What does the identifier CVE-2016-1594 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1594.

Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to read arbitrary attachments via a request to a LiveTime.woa URL, as demonstrated by obtaining sensitive information via a (1) downloadLogFiles or (2) downloadFile action.


Provide references for further information: Can you share references or external links related to CVE-2016-1594?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.novell.com/support/kb/doc.php?id=7017429'}, {'tags': ['x_refsource_MISC'], 'url': 'https://raw.githubusercontent.com/pedrib/PoC/master/advisories/novell-service-desk-7.1.0.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'https://packetstormsecurity.com/files/136646'}, {'name': '20160410 [Multiple CVE]: RCE, info disclosure, HQL injection and stored XSS in Novell Service Desk 7.1.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/538043/100/0/threaded'}, {'name': '39687', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39687/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1594?


Explain the CVE ID: What does the identifier CVE-2016-1595 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1595.

LiveTime/WebObjects/LiveTime.woa/wa/DownloadAction/downloadFile in Micro Focus Novell Service Desk before 7.2 allows remote authenticated users to conduct Hibernate Query Language (HQL) injection attacks and obtain sensitive information via the entityName parameter.


Provide references for further information: Can you share references or external links related to CVE-2016-1595?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.novell.com/support/kb/doc.php?id=7017430'}, {'tags': ['x_refsource_MISC'], 'url': 'https://raw.githubusercontent.com/pedrib/PoC/master/advisories/novell-service-desk-7.1.0.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'https://packetstormsecurity.com/files/136646'}, {'name': '20160410 [Multiple CVE]: RCE, info disclosure, HQL injection and stored XSS in Novell Service Desk 7.1.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/538043/100/0/threaded'}, {'name': '39687', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39687/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1595?


Explain the CVE ID: What does the identifier CVE-2016-1596 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1596.

Multiple cross-site scripting (XSS) vulnerabilities in Micro Focus Novell Service Desk before 7.2 allow remote authenticated users to inject arbitrary web script or HTML via a certain (1) user name, (2) tf_aClientFirstName, (3) tf_aClientLastName, (4) ta_selectedTopicContent, (5) tf_orgUnitName, (6) tf_aManufacturerFullName, (7) tf_aManufacturerName, (8) tf_aManufacturerAddress, or (9) tf_aManufacturerCity parameter.


Provide references for further information: Can you share references or external links related to CVE-2016-1596?

{'tags': ['x_refsource_MISC'], 'url': 'https://raw.githubusercontent.com/pedrib/PoC/master/advisories/novell-service-desk-7.1.0.txt'}, {'tags': ['x_refsource_MISC'], 'url': 'https://packetstormsecurity.com/files/136646'}, {'name': '20160410 [Multiple CVE]: RCE, info disclosure, HQL injection and stored XSS in Novell Service Desk 7.1.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/538043/100/0/threaded'}, {'name': '39687', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39687/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.novell.com/support/kb/doc.php?id=7017431'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1596?


Explain the CVE ID: What does the identifier CVE-2016-1597 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1597.

A logged-in user in NetIQ Access Governance Suite 6.0 through 6.4 could escalate privileges to administrator.


Provide references for further information: Can you share references or external links related to CVE-2016-1597?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.novell.com/support/kb/doc.php?id=7017302'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1597?


Explain the CVE ID: What does the identifier CVE-2016-1598 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1598.

XSS in NetIQ IDM 4.5 Identity Applications before 4.5.4 allows attackers able to change their username to inject arbitrary HTML code into the Role Assignment administrator HTML pages.


Provide references for further information: Can you share references or external links related to CVE-2016-1598?

{'name': '93833', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/93833'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://download.novell.com/Download?buildid=xyswDCMsT7I~'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1598?


Explain the CVE ID: What does the identifier CVE-2016-1599 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1599.

Cross-site scripting (XSS) vulnerability in NetIQ Self Service Password Reset (SSPR) 2.x and 3.x before 3.3.1 HF2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.


Provide references for further information: Can you share references or external links related to CVE-2016-1599?

{'name': '96837', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/96837'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.netiq.com/support/kb/doc.php?id=7017399'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.netiq.com/show_bug.cgi?id=967461'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1599?


Explain the CVE ID: What does the identifier CVE-2016-1600 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1600.

The ServiceNow driver in NetIQ Identity Manager versions prior to 4.6 are susceptible to an information disclosure vulnerability.


Provide references for further information: Can you share references or external links related to CVE-2016-1600?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1600?


Explain the CVE ID: What does the identifier CVE-2016-1601 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1601.

yast2-users before 3.1.47, as used in SUSE Linux Enterprise 12 SP1, does not properly set empty password fields in /etc/shadow during an AutoYaST installation when the profile does not contain inst-sys users, which might allow attackers to have unspecified impact via unknown vectors.


Provide references for further information: Can you share references or external links related to CVE-2016-1601?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://bugzilla.suse.com/show_bug.cgi?id=974220'}, {'name': 'openSUSE-SU-2016:1226', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00007.html'}, {'name': 'SUSE-SU-2016:1138', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00051.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://build.opensuse.org/request/show/388020'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1601?


Explain the CVE ID: What does the identifier CVE-2016-1602 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1602.

A code injection in the supportconfig data collection tool in supportutils in SUSE Linux Enterprise Server 12 and 12-SP1 and SUSE Linux Enterprise Desktop 12 and 12-SP1 could be used by local attackers to execute code as the user running supportconfig (usually root).


Provide references for further information: Can you share references or external links related to CVE-2016-1602?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://lists.suse.com/pipermail/sle-security-updates/2016-June/002096.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1602?


Explain the CVE ID: What does the identifier CVE-2016-1603 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1603.

An information leak in the NetIQ IDM ServiceNow Driver before 1.0.0.1 could expose cryptographic attributes to logged-in users.


Provide references for further information: Can you share references or external links related to CVE-2016-1603?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://download.novell.com/Download?buildid=oZ2bTUJ5Nxs~'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1603?


Explain the CVE ID: What does the identifier CVE-2016-1605 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1605.

Directory traversal vulnerability in the ReportViewServlet servlet in the server in NetIQ Sentinel 7.4.x before 7.4.2 allows remote attackers to read arbitrary files via a PREVIEW value for the fileType field.


Provide references for further information: Can you share references or external links related to CVE-2016-1605?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.netiq.com/support/kb/doc.php?id=7017803'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-406'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1605?


Explain the CVE ID: What does the identifier CVE-2016-1606 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1606.

Multiple stack-based buffer overflows in COM objects in Micro Focus Rumba 9.4.x before 9.4 HF 13960 allow remote attackers to execute arbitrary code via (1) the NetworkName property value to ObjectXSNAConfig.ObjectXSNAConfig in iconfig.dll, (2) the CPName property value to ObjectXSNAConfig.ObjectXSNAConfig in iconfig.dll, (3) the PrinterName property value to ProfileEditor.PrintPasteControl in ProfEdit.dll, (4) the Data argument to the WriteRecords function in FTXBIFFLib.AS400FtxBIFF in FtxBIFF.dll, (5) the Serialized property value to NMSECCOMPARAMSLib.SSL3 in NMSecComParams.dll, (6) the UserName property value to NMSECCOMPARAMSLib.FirewallProxy in NMSecComParams.dll, (7) the LUName property value to ProfileEditor.MFSNAControl in ProfEdit.dll, (8) the newVal argument to the Load function in FTPSFTPLib.SFtpSession in FTPSFtp.dll, or (9) a long Host field in the FTP Client.


Provide references for further information: Can you share references or external links related to CVE-2016-1606?

{'tags': ['x_refsource_MISC'], 'url': 'https://cxsecurity.com/issue/WLB-2016050136'}, {'name': '91548', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/91548'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://community.microfocus.com/microfocus/mainframe_solutions/rumba/w/knowledge_base/28601.rumba-9-4-stack-buffer-overflow-vulnerabilities.aspx'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zeroscience.mk/en/vulnerabilities/ZSL-2016-5327.php'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1606?


Explain the CVE ID: What does the identifier CVE-2016-1607 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1607.

Multiple cross-site request forgery (CSRF) vulnerabilities in the administrative interface in Novell Filr before 2.0 Security Update 2 allow remote attackers to hijack the authentication of administrators, as demonstrated by reconfiguring time settings via a vaconfig/time request.


Provide references for further information: Can you share references or external links related to CVE-2016-1607?

{'name': '20160725 SEC Consult SA-20160725-0 :: Multiple vulnerabilities in Micro Focus (Novell) Filr', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://seclists.org/bugtraq/2016/Jul/119'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://download.novell.com/Download?buildid=3V-3ArYN85I~'}, {'name': '40161', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/40161/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.novell.com/support/kb/doc.php?id=7017786'}, {'name': '92113', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/92113'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1607?


Explain the CVE ID: What does the identifier CVE-2016-1608 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1608.

vaconfig/time in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the ntpServer parameter.


Provide references for further information: Can you share references or external links related to CVE-2016-1608?

{'name': '20160725 SEC Consult SA-20160725-0 :: Multiple vulnerabilities in Micro Focus (Novell) Filr', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://seclists.org/bugtraq/2016/Jul/119'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://download.novell.com/Download?buildid=3V-3ArYN85I~'}, {'name': '40161', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/40161/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://download.novell.com/Download?buildid=BOTiHcBFfv0~'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.novell.com/support/kb/doc.php?id=7017789'}, {'name': '92113', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/92113'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1608?


Explain the CVE ID: What does the identifier CVE-2016-1609 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1609.

Multiple cross-site scripting (XSS) vulnerabilities in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allow remote authenticated users to inject arbitrary web script or HTML via crafted input, as demonstrated by a crafted attribute of an IMG element in the phone field of a user profile.


Provide references for further information: Can you share references or external links related to CVE-2016-1609?

{'name': '20160725 SEC Consult SA-20160725-0 :: Multiple vulnerabilities in Micro Focus (Novell) Filr', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://seclists.org/bugtraq/2016/Jul/119'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://download.novell.com/Download?buildid=3V-3ArYN85I~'}, {'name': '40161', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/40161/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://download.novell.com/Download?buildid=BOTiHcBFfv0~'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.novell.com/support/kb/doc.php?id=7017787'}, {'name': '92113', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/92113'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1609?


Explain the CVE ID: What does the identifier CVE-2016-1610 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1610.

Directory traversal vulnerability in the email-template feature in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote attackers to bypass intended access restrictions and write to arbitrary files via a .. (dot dot) in a blob name.


Provide references for further information: Can you share references or external links related to CVE-2016-1610?

{'name': '20160725 SEC Consult SA-20160725-0 :: Multiple vulnerabilities in Micro Focus (Novell) Filr', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://seclists.org/bugtraq/2016/Jul/119'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://download.novell.com/Download?buildid=3V-3ArYN85I~'}, {'name': '40161', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/40161/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.novell.com/support/kb/doc.php?id=7017788'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://download.novell.com/Download?buildid=BOTiHcBFfv0~'}, {'name': '92113', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/92113'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1610?


Explain the CVE ID: What does the identifier CVE-2016-1611 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1611.

Novell Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2 uses world-writable permissions for /etc/profile.d/vainit.sh, which allows local users to gain privileges by replacing this file's content with arbitrary shell commands.


Provide references for further information: Can you share references or external links related to CVE-2016-1611?

{'name': '20160725 SEC Consult SA-20160725-0 :: Multiple vulnerabilities in Micro Focus (Novell) Filr', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://seclists.org/bugtraq/2016/Jul/119'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://www.novell.com/support/kb/doc.php?id=7017689'}, {'name': '40161', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/40161/'}, {'name': '92113', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/92113'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1611?


Explain the CVE ID: What does the identifier CVE-2016-1612 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1612.

The LoadIC::UpdateCaches function in ic/ic.cc in Google V8, as used in Google Chrome before 48.0.2564.82, does not ensure receiver compatibility before performing a cast of an unspecified variable, which allows remote attackers to cause a denial of service or possibly have unknown other impact via crafted JavaScript code.


Provide references for further information: Can you share references or external links related to CVE-2016-1612?

{'name': 'RHSA-2016:0072', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0072.html'}, {'name': 'USN-2877-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2877-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://googlechromereleases.blogspot.com/2016/01/stable-channel-update_20.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://codereview.chromium.org/1531583005'}, {'name': '1034801', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034801'}, {'name': 'openSUSE-SU-2016:0249', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00035.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://code.google.com/p/chromium/issues/detail?id=497632'}, {'name': 'GLSA-201603-09', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'https://security.gentoo.org/glsa/201603-09'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://chromium.googlesource.com/v8/v8/+/cfbd16172fa165cc33ce0e2e72f74e5561168a61'}, {'name': 'openSUSE-SU-2016:0271', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00046.html'}, {'name': 'DSA-3456', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3456'}, {'name': '81431', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/81431'}, {'name': 'openSUSE-SU-2016:0250', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00036.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-1612?


Explain the CVE ID: What does the identifier CVE-2016-1613 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-1613.

Multiple use-after-free vulnerabilities in the formfiller implementation in PDFium, as used in Google Chrome before 48.0.2564.82, allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted PDF document, related to improper tracking of the destruction of (1) IPWL_FocusHandler and (2) IPWL_Provider objects.